Most of the support code already exists (especially once we merge #572) but there are some questions of how the API should work for this kind of extraction. For one thing, the current rootfs + mtree model doesn't really work so we would need to rework a lot of that logic as well as come up with a nice way for runc run to "just work" with an auto-setup overlayfs mount...