A VM is not allowed to write to its parents's namespaces, removing an item from a namespace cannot fail. So at present if you attempt to delete an item owned by a parent the only recourse is to crash. Solution: Each vm shall have a "black list" set (a map[string]bool, created only if used) that such deletions can be recorded in and future namespace lookups fail if the searched name is in the blacklist.

This issue was closed by revision 9f97421912.