Use --device from docker 1.3.0.

This avoids the need to use --priviledged.