Workers settings init
app permissions settings
stripping disc
storage - set /tmp to ephemeral