Implement running of one-off admin commands in ephemeral docker containers fixes #70

We are now constructing the `docker run` command with the relevant bind mount, image and sudo prefix.  For some unknown reason, a pty allocation is necessary to have `docker run` return when exec'd over SSH.  This PR also includes test coverage using the mock provider.