Doing the controller based ioctls on a per-namespace node has been really painful for the existing ioctl. So I'd much prefer to avoid that, but I'd be happy to hear more opinions.