UPDATE: slapo-ppolicy container question