securing capabilities on lxc containers
reducing tty consoles (2)