run-once containers should be upstart tasks