version bump: v1.6.1
refactor the LXC start command arguments into a method; explicitly override aa_profile and cap.drop if supplied