When trying to enter a user namespace and still communicating with the rest of the Linux system via D-Bus then this won't work:
$ unshare -U -r
$ root # dbus-monitor --system
Failed to open connection to system bus: Did not receive a reply. Possible causes include: \
the remote application did not send a reply, the message bus security policy blocked the reply, \
the reply timeout expired, or the network connection was broken.
The reason for this is a bit intricate. It is not found on kernel permission level but in the D-Bus userspace logic. It is explained in this mailing list post: