userns: Allow setting gid_maps without privilege when setgroups is disabled