Why bare-metal containers are scaring VMware