contain.rb is still used out of the kci/ dir and has compat crap inside
- fork into nci/ dir
- possibly drop kci/ dir altogether as kubuntu forked it anyway and we do not maintain kci/
- move away from pwd_bind compat, I am not sure what is necessary to do that, but I think it has to do with ENV.fetch('x', '/workspace') so we default to pwd:/workspace mapping whereas the compat will default to pwd:pwd mapping