fix run --privileged containers