Tecnativa's security-enhanced HAProxy-based proxy for the Docker socket with per-endpoint allow/deny env vars.