sandbox: Move parent process code inside sandbox
Only the namespace sandbox forks and the parent process just waits for the child termination. This commit moves the waiting code to a helper function, now the parent waits inside the enter_namespace(). This will ease the implementation of user namespace uid/gis mapping.