Docker socket security