(recently finished reading Container Security by Liz Rice; excellent, well-structured read, highly recommended. I'll be posting my notes...