Escape Docker, board your rkt and blast off for unikernel space. Be sure to avoid the interstellar systemdaemons as they are now sole proprietors of earth bound cgroupings.

In all seriousness I had never heard of Subuser before this thread and it looks very promising.