Rocket, a new container runtime from CoreOS

Well they just don't talk about security.

I never said it's a good policy. Personally I find it counter productive to treat security as a bolt-on, but that's just how things work in my experience.