lxcsu-internal to call capsh with --user=<slicename>