[WIP] Add container command execution proposal

@jwhonce if the executor runs in a container, then as long as it's able to nsenter other containers' network namespaces, we can put socat in the executor's image and not need to modify atomic.