Contains container's policies.
Determines who can delete a container
Determines who can get a container
Determines whether the owner can be removed from the list of managers
Determines who can update a container
Determines who can update policy
Determines whether the updater can be removed from the list of managers