Added no-new-privileges to all my outward facing containers :P