(we need this for shaping lans).  The imq device relies on netfilter hooks
to accomplish its packet redirection, and netfilter is of course
virtualized.  So, have to capture the movement of IMQ devices between
containers, re-register netfilter hooks on a per-container basis when they
boot/shutdown, etc.  I haven't got rid of the hardcoded limit on imq
devices yet.