Turns out you can use the host's process namespace apparently. This could mean no more /hostproc, and tracer might even run in a container.