would be much simpler if enter-lxc-namespace was looking along a PATH...