Network icc

guests shouldn't be able communicate between each other when docker param `--icc=false`
The ``os`` module is not used anywhere in ``dockercmd``.