The upside being that we do consider those containers to be root-safe and so, as long as you keep on top of kernel security issues, those containers are safe. If this flag is 0 (default), then the container will not bestarted if the kernel lacks the apparmor mount features, so that aregression after a...