We ran some experiments by using the right cred->user_ns for our upcalls, and it seems like we still always upcall to the host user namespace. After reading the request_key code in more detail, it looks like we use the cred->user_ns field only if the dest keyring is a user or user-session keyring. I wanted to understand more why all keyring types cannot make use of user_ns too? Also, why do creds only contain the user_ns as a field? What about the rest of the namespace types? -- Regards, Shyam
