added build for docker using crosbymichael/docker repo with libcontainer fine grained control of privileged operations...  instead of just --privileged you get -o <key>=<value> (i.e. "-o native.ns.drop=NEWNET --networking=false" and "-o native.apparmor_profile=/etc/apparmor.d/some_profile" and "-o native.cgroups.memory=500m" etc...)