LXC rc file to run command without sudo