Support running privileged containers.
Make sure state directories exist.
sdutil syntax has changed.