Would running Codex in a container on its own fix such vulnurabilities?