Cockpit as a privileged container?