new-api: execute a process inside an existing container 

I guess we need a way to not just nsenterExec, but also be able to call out arbitrary code as command extensions like we do here for mknod.