Probably want to implement the following: - (un)expose container ports to outside world - rename / relabel (names not implemented yet, this can be done later) - limit resources (mem, cpu, other stuff?)