We'd like to be able to provide node isolation from the build containers. One major way to ensure this is to restrict the ability to create privileged containers to the Jenkins Configuration.

The privileged containers can then be restricted in the manner the end user needs to prevent further abuse.