Move Privileged and AAUnconfined to HostConfig.