Add a global flag to enable/disable privileged containers