cluster/container: add StartExec and CreateExec