In case unprivileged users run containers via execute() or a start*() there are
valid cases where they may only want to map their own {g,u}id. Let's not block
them from doing so by requiring geteuid() == 0.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>