automatically use privileged/non-privileged execution

[CrimsonFez]

We should be able to detect whether the runtime container as the proper privileges and set storage layer and build isolation correctly.
By making this change, there will be less configuration required for non-privileged environments.