listen calls newns() internally, so changing the namespace by hand doesn't affect it. listen can be given alternate service directories (see listen(8)) and will now ignore zero-length files in the service directories, so binding /dev/null onto files in /bin/service (for example) in /cfg/$sysname/namespace can be used to alter the set of services offered.
The patch system is still working. We're a bit behind processing the queue but working on it.
