Filter out CLONE_NEWNS and CLONE_FS, as vc_get_space_default does.