Change nsenter to support docker 'runin'

I'd say that nsenter is a "private" command so I'm okay not documenting these since no user should need to call it.