Docker runs privileged containers unconfined (apparmor) after container restart | Hacker News Reader