I run my agents in a docker container

how easy is it for them to get out?