daemon / add DOCKER_HOST to allow more secure settings