Using namespace fds instead of paths and nspids

This change removing hardcode usage of PID namespaces and allows to pass namespaces fd to libcontainer instead.
There will be change in docker with persistent network namespaces for each container.
well state is serialized to disk so if we are going to continue doing that we should probably use paths to the actuall namespace files or to bind mounts