This is a good idea, but the docker daemon runs as root so it's at least theoretically possible to break out of the container and start messing with the host, a

This is a good idea, but the docker daemon runs as root so it's at least theoretically possible to break out of the container and start messing with the host, as root.