Privileged Container Escapes with Kernel Modules