Lxcfs provides a fuse based filesystem to improve the lxc experience within the containers.
this provides a pluggable authentication module (pam) to provide logged-in users with a set of cgroups which they can administer. this allows for instance unprivileged containers, and session management using cgroup process tracking.