There's already unix permissions and regular namespaces. Docker is very hard to secure.