It sounds like there's a missing abstraction layer, or maybe just fewer administrative tools for these container approaches than the built-in-at-time-of-creation attributes of a true virtualized guest.