Docker should be run in privileged mode to allow portage integration with cgroups

[p8952]

When docker is not running in privileged mode portage features like 'network-sandbox' and 'cgroups' wont function due to a perceived lack of kernel support.