Allow contain and pseudo to be run as root if there are explicit entries
in /etc/subuid and /etc/subgid, taking care not to use --map-root-user
in this case.