pass handle to linux container, not entire spec