Docker logs and inspect commands now check for dangerous global flags like --host, --context, --tlscacert, --tlscert, and --tlskey that could redirect the Docker daemon connection. These flags will now trigger permission prompts.
Evidence
New Docker global flag checking (search for "--tlscacert")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
