[WIP] Support unprivileged containers