for now we need a privileged container for creating the sdcard images since we can't create loop devices otherwise, and i didn't find any other way yet