Reference on what Docker’s privileged mode actually does to a container