How containers enable passive patching | Hacker News Reader