added comment to Dockerfile with example of launching privileged container with proper mounts...  wish --rbind was possible from docker run