Support 'expose' config option, like docker's --expose

Exposes ports to linked services without publishing them to the host machine.