Explicitly set interpreter for LXC commands

This isn't ideal, and we'd prefer that changes-client do this but it doesnt
yet support single-command scripts.