Classic confinement for fluxctl

[jdstrand]

Also note Classic confinement for kontena-lens. This may be a new class of classic request.