Your containers should not need a secret virtual machine to feel simple!
I'm glad I switched to LXCs ...