> Is there a better daemon auth model that's not in use so you can at least have longer-lived tokens, etc? Docker does have authorization plugins[1], and there

> Is there a better daemon auth model that's not in use so you can at least have longer-lived tokens, etc? Docker does have authorization plugins[1], and there is work to get authentication working[2]. So the answer is "eventually being in the docker group will be safer", but not yet. Personally, I think the future of containers (at least for a lot of the cases I deal with) is going to be with rootless containers[3]. But that's another story. [1]: https://github.com/docker/docker/pull/15365 https://github.com/docker/docker/pull/15365 [2]: https://github.com/docker/docker/issues/14674 https://github.com/docker/docker/issues/14674 [3]: https://github.com/opencontainers/runc/pull/774 https://github.com/opencontainers/runc/pull/774