Aaaand now we have sshhole: you can just log into containers by typing a password longer than 256 chars. Proving my point. The CADT development model (a.k.a. open source) cannot produce secure software, period.