I know, but these flags have to be set by provider of container, not user (provider of VPN). And they might require changes in kernel.