run lxc-enter-namespace with --noseclabel