document --privileged flag and clear containers

[mcastelino]

We need to document the behavior differences between a runc --privileged container and a clear container. We may need to change how we launch the workload in the container to provide at least some of the characteristics of a --privileged container.