RFE: support audit container ID filtering

[rgbriggs]

Add userspace audit tool support for the features introduced by kernel audit container ID support.

• filtering on container ID
• ausearch support

See: linux-audit/audit-kernel#91
See: https://github.com/linux-audit/audit-kernel/wiki/RFE-Audit-Container-ID

[rgbriggs]

Posted RFC v1 userspace patch for auditctl containerid filter support:
https://www.redhat.com/archives/linux-audit/2018-March/msg00030.html
https://lkml.org/lkml/2018/3/5/82

[rgbriggs]

Posted v2 userspace patchset upstream:
https://www.redhat.com/archives/linux-audit/2018-March/msg00124.html
https://lkml.org/lkml/2018/3/16/210

[rgbriggs]

Posted v3 patchset upstream:
https://www.redhat.com/archives/linux-audit/2018-June/msg00059.html
https://lkml.org/lkml/2018/6/6/626

[rgbriggs]

Posted v4 patchset upstream:
https://www.redhat.com/archives/linux-audit/2018-July/msg00189.html
https://lkml.org/lkml/2018/7/31/862

[rgbriggs]

Posted v5:
https://www.redhat.com/archives/linux-audit/2019-March/msg00036.html
https://lkml.org/lkml/2019/3/15/544

[rgbriggs]

post v6:
https://www.redhat.com/archives/linux-audit/2019-April/msg00062.html
https://lkml.org/lkml/2019/4/9/774

[rgbriggs]

Test case v1 PR: linux-audit/audit-testsuite#83