in the root context.  Also, give containers CAP_NET_ADMIN so they can
set the per-device txqueuelen via ifconfig.  This may be a bad idea...
but for now it's helpful!