only allow one container group at the moment, for rendering nicely in #1 - may need to address more cleanly for intentional multiple group membership in the future.