Sandboxing proprietary applications with Docker