Exploring container security: Isolation at different layers of the Kubernetes stack, with Tim Allclair