Cloud Foundry libcontainer API proposal

This builds on our [minimal changes](https://github.com/cf-guardian/libcontainer/commit/2575fbf353f9fab66c94fc476bec59805f8c288b) to [@vmarmol's API proposal](https://github.com/cf-guardian/libcontainer/commit/62e19761a077b3d5dfdd056df06da771b3a377ba).

This proposal is more ambitious and attempts to unify Containers with and without namespaces. A further possibility, not covered here, is to extract the non-namespaced "container" function as a "process in a control group" primitive.
Agreed, but I worry about the [surprise factor](http://play.golang.org/p/BtKAu3PwhR) of "half nil" interface values.