I always run harnesses using devcontainers, gives me much needed flexibility and peace of mind with regards to data separation guarantees