lxccontainer: wrap slock in privlock

Now that slock is just a flock, we can't rely on it to exclude
threads.  So always wrap it inside privlock, and explain that
in the comments.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>