`(docker|podman) network create --internal` is known to be used in Gemini CLI's sandbox, etc. https://github.com/google-gemini/gemini-cli/blob/c7a1de49832b7a5a6f62115085620dea97eb92cc/packages/cli/src/utils/sandbox.ts#L522-L536