core: Add DelegateNamespaces= (#36532)

src/core/execute.h

@@ -350,6 +350,7 @@ struct ExecContext {
         unsigned long personality;
 
         unsigned long restrict_namespaces; /* The CLONE_NEWxyz flags permitted to the unit's processes */
+        unsigned long delegate_namespaces; /* The CLONE_NEWxyz flags delegated to the unit's processes */
 
         Set *restrict_filesystems;
         bool restrict_filesystems_allow_list:1;