modules.lxc: add keep_env param to run_cmd