OpenShift sandboxed containers

Extracted from: securing-agent-runtimes/index.md