So the error case is if there is virtualization that we can't detect before we get to lxc, AND lxc-version is installed, correct? In general, lxc is lowest precedence in case of any conflicts with other virtualization, right? It can then remain this way until we have a reliable way to detect it -- the fact that it is unreliable means it gets to go last.