(chore) support unprivileged container

- use lxc execute to read/write files.
- options can have io objects, which ...
I don't think this will work (unless I'm missing something); read_file takes a path, no arguments specified here. Did you mean read_file(container_path(path))?