More work on the docker isolator