combining that with a docker container breakout would be interesting

https://news.ycombinator.com/item?id=7909622 (Docker container breakout?)