disallow net=host and net=container with links and dns