Exploring container security: Day one Kubernetes decisions