Don't expose the docker socket, even to a container

Don't expose the docker socket, even to a container. 101 comments, 133 points on Hacker News.