Network icc

guests shouldn't be able communicate between each other when docker param `--icc=false`
docstrings != actual parameters