• Support for non-orchestrated containers
• LSM specific behaviour
• Enforcement using BPF LSM
• Allowed Label Selectors
• Enforcement using AppArmor
• Allowed Label Selectors
• Steps