The Next Episode in Workload Isolation: Confidential Containers - Jeremi Piotrowski, Microsoft