How to make user namespace remapping mandatory?

Hi folks,

how can I make user namespace remapping mandatory? Maybe I haven’t found the right option yet, but as a security feature it appears to be of little use, if it can be switched off easily on the docker command line using –userns=host.

Every helpful comment is highly appreciated
Harri