Why Is Container Security So Difficult?