Deconstructing Docker for safety-critical applications