Bug#959884: hardening-runtime: max_user_namespaces breaks uuid-runtime

[Aaron M. Ucko]

At any rate, per https://github.com/systemd/systemd/issues/35311, 
setting the limit to 0 now also breaks the latest systemd version 
(257~rc2-3).  I haven't attempted to assess the minimum it needs.