userns: unshare_userns(&cred) should not populate cred on failure