Roche Interview Question

What are container security best practices?