add flag for --privileged; false by default

as long as this can affect how the build runs remotely vs. locally, it
should be configurable. not running as root is a saner default.