container: network: host privileged: false options: "--security-opt label:disable"