add lxc-default-cgns profile This isn't safe for privileged containers which do not use cgroup namespaces, but is required for systemd containers with cgroup namespaces. So create a new profile for it which lxc will use as the default when it knows it can. Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>