DisableSecOpt returns a security opt that can disable labeling support for future container processes.

DupSecOpt takes an process label and returns security options that can be used to set duplicate labels on future container processes.

InitLabels returns the process label and file labels to be used within the container.