---
pod:
mandatory_access_control:
type: apparmor
metacontroller:
metacontroller: localhost/docker-default
...