teach docker about --net netns:

This patch adds the new "netns" network mode, which allows Docker to
connect a container to an existing network namespace that has been
previously created using the `ip netns add` command.

Currently a WIP.

Closes #7455

Signed-off-by: Lars Kellogg-Stedman <lars@redhat.com>