Master enterprise Docker hardening at scale by enforcing non-root users, read-only root filesystems, and tmpfs…