Based on code from https://github.com/hungys/binder-for-linux

* based on liblxc now
* container is managed by a management process which needs to run as
  root. LXC will take care of strict confinement of this container.
  We still don't allow any direct hardware access.
* `anbox shell` command is gone. Same functionality can be archive
  with the lxc-attach command.

If we keep them enabled Android will take the input device as a keyboard
which will actively block the virtual keyboard to come up.