So anyone pulling a malicious dockerfile jeopardizes the host? That would be bad...