From a security and composability perspective, the Docker process model - where everything runs through a central daemon - is fundamentally flawed.