shouldn't this come from a flag in `commands.go` also thinking about this how do we do this from docker build? As per #1916 we don't support privileged or other CmdRun flags in `build` or `Dockerfile`.