* forbid to login from 127.0.0.1 without password * add localhost limit * rename
--cap-add SYS_PTRACE