API change: privileged containers should be started using "privileged" flag not created with it