restructured container for security, readability; re-wrote documentation
minor vendoring
initial commit with unvendored files