I run mine in a docker container and they get read only access to most things.