Add unprivileged containers support

Signed-off-by: Chuck Short <chuck.short@canonical.com>