nspawn: newer kernels (>= 3.14) allow resetting the audit loginuid, make use of this