deny net host + dns and links with container net

Docker-DCO-1.1-Signed-off-by: Cristian Staretu <cristian.staretu@gmail.com> (github: unclejack)
Merge pull request #7780 from unclejack/disallow_dns_with_net_host

disallow net=host and net=container with links and dns