We may enable this again later conditionally on what the device
we're running on supports.

As we have a static window size for now we can't maximize to the whole
screen size.

Based on code from https://github.com/hungys/binder-for-linux

* based on liblxc now
* container is managed by a management process which needs to run as
  root. LXC will take care of strict confinement of this container.
  We still don't allow any direct hardware access.
* `anbox shell` command is gone. Same functionality can be archive
  with the lxc-attach command.