Change nsenter to support docker 'runin'

Ah, why do we need to parse the flags before that?