Docker's default root setup turns one vulnerable container into a full system compromise ...