Add devices into containers

A new '--device' option to 'docker run' adds specified devices to
the container.  For example, it's useful to directly expose block
storage devices.