Address potential security issue due to unrestricted image names

[mbr]

At the moment, --- is used as a separator in container names, leading to names like

rockslide---repo---image

for running containers. This scheme needs to be either removed and containers inspected for which image they are running, potentially with an annotation on the container, or input sanitized so that images with three dashes in the name are refused.