mubininnoctive

**Tell us about your request** Introduce an opt-in image-level protection mechanism that allows Docker image authors to request restricted filesystem extraction (e.g. disabling docker cp, docker export, and docker save)...