“Thin OS” Security for Container Hosts