Provides a restricted docker.sock for untrusted containers - View it on GitHub