Just don't put any personal credentials on those instances (e.g. github tokens, aws access keys, etc). I don't know if it's still the case but when it was firs

Just don't put any personal credentials on those instances (e.g. github tokens, aws access keys, etc). I don't know if it's still the case but when it was first released I was able to mount other container volumes and snag them. (Reported to Docker security)