[do not merge] introduce oo-container-network

This comment make reference to running this on a live node.  I believe that would risk loosing data as the node  could be updating the iptables while you are copying files on the system.  Shutting down MCO prior to running this script would prevent that issue.