Applications would be isolated between different accounts. What is the difference between this kind of isolation and the isolation supported by container technology?