Disable various services when running inside a container
Allow services to specify a pre-stop script
nscd: Fix LD_LIBRARY_PATH

This ensures that nscd can find the NSS modules.

Fixes #1248.