Pulp container is going to use the standard pulp database backed access policies. We need to design a system where we can define our own access policy for pulp container and ensure that it doesn't get modified in the database. This will mean creating a script that loads our access policy into the database each time the app is restarted.