Excellent bit of advice if you're going to use containers for security. At very least you probably want to look at some form of MAC such as SELinux or AppArmor. And good security practices still apply - don't run as root or run untrusted code.

(via LWN http://lwn.net/Articles/606176/ )