Yeah, we investigated that route, but on stateless containers it seemed really cumbersome?

I don't remember exactly why now, but isn't there some problem with the ephemeral nature of the container? Like that each instance of the container needs their own service account or something?

> What Windows containers offers are Group Managed Service Accounts which reduces the administrative overhead managing service accounts for Linux containers and makes them completely transparent to the container.

Aah, yeah, that seems nice.