Docker driver as an external plugin

This lets you use docker under two different task driver names. You can allow privileged containers for one, but not the other, and use namespace's enabled_task_drivers to control access to privileged containers.