Only expose port 4444 in the Hub container

The node images shouldn't be exposing the 4444 port since they don't
even listen on that port.

Part of #3