Cannot run snaps apps inside a custom netns or a tmux session

snapd
3

It seems that ip netns exec foo sh calls unshare(CLONE_NEWNS) - giving it a new mount namespace. What are we missing?