Aptar Closures' SureSnap system offers a two-piece, pre-assembled valve and retaining ring for reusable beverage containers.

The short answer: Yes; a container running in privileged mode basically has full access to the host, whereas the subset of security options listed in the "hard way" still provide isolation ... can be ...