https://bugzilla.redhat.com/show_bug.cgi?id=1033604
--- Comment #14 from Daniel Walsh dwalsh@redhat.com --- Well we had a long conversation on @docker with the docker guys and Lennart, it came down to systemd expecting /run and /dev being mounted and pre-created. Lennart also says that things will break with systemd running certain Unit files since docker was removing the CAP_SYS_ADMIN.
Basically any unit file that specified a PrivateNet, PrivateDevice, PrivateTmp, since systemd would require SYS_ADMIN privs to be able to "mount" and create device nodes.