We have to do it before we join the container's mntns so we have
the host's procdir.
Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>