Add --net=netns:<name> option to use a given netns

Allow external configuration of a container's network namespace.

Addresses #7455
wait - what?