code: func (i *IdentityMapping) ToHost(pair Identity) (Identity, error) {
  	var err error
  	target := i.RootPair()
  
  	if pair.UID != target.UID {
  		target.UID, err = toHost(pair.UID, i.uids)
  		if err != nil {
  			return target, err
  		}
  	}
  
  	if pair.GID != target.GID {
  		target.GID, err = toHost(pair.GID, i.gids)
  	}
  	return target, err
  }
docs: // ToHost returns the host UID and GID for the container uid, gid.
  // Remapping is only performed if the ids aren't already the remapped root ids