Goals: - reduce CVE's in NIC container - re-use existing images for nginx/plus/nap Options: - use agent to write nginx config/secrets/certs etc