docker {run,create} --security-opt no-new-privileges
Signed-off-by: Harald Albers <github@albersweb.de>