Changes are minor from 1.9, so let's just set it as default straight.
In a user namespace, sending credentials for an unmapped user return EINVAL instead of EPERM. So handle that case. http://hydra.nixos.org/build/44839000 (cherry picked from commit 1dd0fb6b5a7c44d1b632466f936ca74268d13298)