Add a in container exec based health check.

nit for a followup: probably should check if it exists already