v0.4.0

Added

• masked and read-only container paths (OCI-style hardening)

Other

• Merge pull request #150 from bleggett/bleggett/fix-cargo-make-cachemiss
• update cargo dependencies