### Is there an existing issue for this?

- [X] I have searched the existing issues

### Current Behavior

Error when invoking lambda if the `LAMBDA_DOCKER_FLAGS` is specified

### Expected Behavior

_No response_

### How are you starting LocalStack?

With a `docker run` command

### Steps To Reproduce

#### How are you starting localstack (e.g., `bin/localstack` command, arguments, or `docker-compose.yml`)
```shell
CONTAINER=$(docker run -d --rm \
        -v "$(pwd)":/hello \
        -v /var/run/docker.sock:/var/run/docker.sock \
        -e DEBUG=1 \
        -e DOCKER_HOST="$BITBUCKET_DOCKER_HOST_INTERNAL":2375 \
        -e LAMBDA_DOCKER_FLAGS="-e HELLO=hello" \     # Error cause!
        localstack/localstack:2.1.0)
```

#### Client commands (e.g., AWS SDK code snippet, or sequence of "awslocal" commands)
```shell
docker exec "$CONTAINER" awslocal lambda create-function --function-name testlambda --role arn:aws:iam::000000000000:role/DummyRole --runtime java11 --handler com.atlassian.lambda.demo.SNSEventLambdaHandler --zip-file fileb:///hello/dx-ref-java-lambda.jar --memory-size 1024 --timeout 20
docker exec "$CONTAINER" awslocal lambda publish-version --function-name testlambda
sleep 3

docker exec "$CONTAINER" awslocal lambda invoke --function-name testlambda --invocation-type RequestResponse out
```
In error message you will see the following:
```
2023-06-07T15:41:14.603  WARN --- [t-lambda:1_0] l.u.c.container_client     : Overwriting Docker container privileged flag None with new value False
2023-06-07T15:41:14.609  WARN --- [t-lambda:1_0] l.s.a.i.runtime_environmen : Failed to start runtime environment for ID=42aed13409971175bbb22c9c3d171517 with: 
Traceback (most recent call last):
  File "/opt/code/localstack/.venv/lib/python3.10/site-packages/docker/api/client.py", line 268, in _raise_for_status
    response.raise_for_status()
  File "/opt/code/localstack/.venv/lib/python3.10/site-packages/requests/models.py", line 1021, in raise_for_status
    raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 403 Client Error: Forbidden for url: http://10.39.159.168:2375/v1.41/containers/create?name=test-service-default-ab689411-localstack-1-lambda-environment-test-lambda-42aed13409971175bbb22c9c3d171517&platform=linux%2Famd64
The above exception was the direct cause of the following exception:
Traceback (most recent call last):
  File "/opt/code/localstack/localstack/utils/container_utils/docker_sdk_client.py", line 676, in create_container
    container = create_container()
  File "/opt/code/localstack/localstack/utils/container_utils/docker_sdk_client.py", line 657, in create_container
    return self.client().containers.create(
  File "/opt/code/localstack/.venv/lib/python3.10/site-packages/docker/models/containers.py", line 906, in create
    resp = self.client.api.create_container(**create_kwargs)
  File "/opt/code/localstack/.venv/lib/python3.10/site-packages/docker/api/container.py", line 431, in create_container
    return self.create_container_from_config(config, name, platform)
  File "/opt/code/localstack/.venv/lib/python3.10/site-packages/docker/api/container.py", line 448, in create_container_from_config
    return self._result(res, True)
  File "/opt/code/localstack/.venv/lib/python3.10/site-packages/docker/api/client.py", line 274, in _result
    self._raise_for_status(response)
  File "/opt/code/localstack/.venv/lib/python3.10/site-packages/docker/api/client.py", line 270, in _raise_for_status
    raise create_api_error_from_http_exception(e) from e
  File "/opt/code/localstack/.venv/lib/python3.10/site-packages/docker/errors.py", line 39, in create_api_error_from_http_exception
    raise cls(e, response=response, explanation=explanation) from e
docker.errors.APIError: 403 Client Error for http://10.39.159.168:2375/v1.41/containers/create?name=test-service-default-ab689411-localstack-1-lambda-environment-test-lambda-42aed13409971175bbb22c9c3d171517&platform=linux%2Famd64: Forbidden ("authorization denied by plugin pipelines: --privileged=true is not allowed")
The above exception was the direct cause of the following exception:
Traceback (most recent call last):
  File "/opt/code/localstack/localstack/services/awslambda/invocation/runtime_environment.py", line 172, in start
    self.runtime_executor.start(self.get_environment_variables())
  File "/opt/code/localstack/localstack/services/awslambda/invocation/docker_runtime_executor.py", line 314, in start
    CONTAINER_CLIENT.create_container_from_config(container_config)
  File "/opt/code/localstack/localstack/utils/container_utils/container_client.py", line 753, in create_container_from_config
    return self.create_container(
  File "/opt/code/localstack/localstack/utils/container_utils/docker_sdk_client.py", line 685, in create_container
    raise ContainerException() from e
localstack.utils.container_utils.container_client.ContainerException
```
which is caused by:
```python
if args.privileged is not None:
            LOG.warning(
                f"Overwriting Docker container privileged flag {privileged} with new value {args.privileged}"
            )
            privileged = True
```
in `localstack.utils.container_utils.container_client.Util.parse_additional_flags`

#### Also note that error `Overwriting Docker container privileged flag None with new value False` itself is misleading 


### Environment

```markdown
- OS:Mac/darwin
- LocalStack:2.1.0, 2.0.x, latest
```


### Anything else?

_No response_
import dataclasses
import io
import ipaddress
import logging
import os
import re
import shlex
import sys
import tarfile
import tempfile
from abc import ABCMeta, abstractmethod
from enum import Enum, unique
from pathlib import Path
from typing import Dict, List, NamedTuple, Optional, Tuple, Union
from localstack.utils.no_exit_argument_parser import NoExitArgumentParser
if sys.version_info >= (3, 8):
    from typing import Literal, Protocol, get_args
else:
    from typing_extensions import Protocol, get_args, Literal
from localstack import config
from localstack.utils.collections import HashableList
from localstack.utils.files import TMP_FILES, rm_rf, save_file
from localstack.utils.strings import short_uid
LOG = logging.getLogger(__name__)
WELL_KNOWN_IMAGE_REPO_PREFIXES = ("localhost/", "docker.io/library/")
@unique
class DockerContainerStatus(Enum):