Add -expose flag to expose ports without publishing