Connect to container without exposing port (fixes #4)