* based on liblxc now
* container is managed by a management process which needs to run as
root. LXC will take care of strict confinement of this container.
We still don't allow any direct hardware access.
* `anbox shell` command is gone. Same functionality can be archive
with the lxc-attach command.
