Support unprivileged containers

This adds basic support for containers sorted in the home directory.

Unfortunately those won't quite work afterwards because their config can not be represented as an ini due to duplicate keys (lxc.include, lxc.cap.drop, lxc.id_map) but the change should still be safe.

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>