there has to be a better way than giving a slop coded project access to your docker daemon (im assuming?)