Prototype solution which will work in EKS/ECS backed by Fargate

Fargate is most problematic environment for now:
- najsil doesn't work because we can't grant NET_ADMIN perms
- landjail may not work, because older kernel is used in Fargate, and we don't have control on it

Good news is clone syscall is allowed, so it's still possible to try to make nsjail work in this ENV by using sockets (see SRT arch.) instead IPTables rules.