Spin up disposable containers with strict seccomp profiles, network egress policy and full runtime telemetry.