new-api: execute a process inside an existing container 

@crosbymichael Was thinking about setup for user namespaces, but I guess could worry about that later.