Otherwise containers will be running by default with a socket to the docker host which is insecure. The default must be secure.