A tenant container must not access the host's control interfaces. Which design objective is most relevant?

1. Isolation across workload and host trust boundaries
2. Hiding the Pod's name
3. Using identical passwords for all tenants
4. Sharing host namespaces by default