add: best practice for security when sharing host directories. Upstream-commit: c844effeda1af144eee964e62528d7b362bb33a3 Component: engine