Add a in container exec based health check.

Also should comment whether it is executed under a shell or not (e.g. can it include a glob, pipes, etc)