On: #include </etc/shadow>

[forty]

I think I you run it without --privileged and userns enabled it's not that bad, since at least the processes run with an unprivileged user.