removing the docker package... I'll just wait for docker to implement user namespace...  for the mean time I'll run lxc inside of docker with user namespaces for the applications I would like to run more securely...