dockerng: compare sets instead of lists of security_opt
dockerng: compare sets instead of lists of security_opt

Apparently some versions of docker add label=disabled to security_opt
when the container is launched as privileged. This causes Salt to
relaunch the container to remove it on next run.
Container started as privileged and with the security_opt set, causes it
to have the option set twice and makes salt want to remove one instance.
With this fix, dockerng will compare just (non-)existence of the flag.
So containers started with privileged flag and security_opt set to
label=disabled will not get relaunched on every salt run.
Fixes #39447

saltstack/salt,saltstack/salt,saltstack/salt,saltstack/salt,saltstack/salt