add --privileged switch, because netadmin capability was dropped in docker 0.8.x