keep stdout and stderr separate in with_container_netns
so we don't end up swallowing warnings when redirecting stdout

Fixes #285.