README: Pi does not include a built-in permission system for restricting filesystem, process, network, or credential access. By default, it runs with the permissions of the user and proce…
README: - **Plain Docker**: run the whole `pi` process in a local container for simple isolation.