kill processes left running by tag/trove scripts

When tag or trove scripts leave running processes, they previously
prevented unmounting the filesystems, breaking builds.  Now they
are run in a new pid namespace and are terminated after the tag
and trove scripts have returned.

Signed-off-by: Michael K Johnson <johnsonm@foresightlinux.org>

Fixes #5