The daemon gets its own isolated PID namespace.
The daemon shares the PID namespace with co-located tasks on the same container instance.