Resolve privileged NeuroDesk startup script, either by making unprivileged or running it outside of container

[tclose]

[tclose]

@fxusyd will integrate a smarter device manager into XNAT

[aswinnarayanan]

@fxusyd: branch in ais repo with fixes

#166