https://docs.redhat.com/en/documentation/openshift_sandboxed_containers/1.7/html/user_guide/about-osc#about-osc
https://www.redhat.com/en/blog/the-dawn-of-openshift-sandboxed-containers-overview
https://aws.amazon.com/blogs/containers/enhancing-kubernetes-workload-isolation-and-security-using-kata-containers
https://docs.google.com/document/d/1oZTjqccGQEVTXMuCpxJV6LIl9tssqnRxKGSYB2SChQE/edit?tab=t.0#heading=h.h3fq5xxo9he4 (scenarios 1 and 2)