multitenant: scan container command-lines as well as process

[bboreham]

In most cases there will be fewer containers than processes, so we can get the answer faster. Also this works in the case where process-scanning has been turned off.