But what's the guarantee that someone isn't running an older version of the container?