This is designed to run stuff that needs privileged access inside an unprivileged container, by running a whole qemu vm inside the container.