add mediator script

this script is run with sudo, nothing else

no longer need anything as root,
nor any long-running services.
fork & wait in child to avoid zombie servers
remove unused handlers file
make subprocess async
add example Dockerfile
readme example