Why not allow everything? It's not like it can do much inside the container.