Restrict a Container's Access to Resources with AppArmor