document alternative random container names

Perhaps we'll decide not to do it this way, but let's add the
possibility to the spec and consider it.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>