creating isolated containers with keystone

Hi. I want to know if it's possible to create containers inside keystone using namespace isolation? I was more concerned about creating nested enclaves, but since keystone doesn't support that, I want to know if I can have a trusted application that creates containers to run specific codes inside it?