provision/docker, app: Safer containers-move implementation avoiding concurrency issues