Add the ability to turn off image pulling.

comment on the failure mode for each: Always attempt ... and fail the container if the pull fails.