batches: disable network access by default
Created by: martin-sucha
Most of the time the container should not need network access as all the tools to change the files should be available in the Docker image already. Preventing network access by default reduces chance that some code in the Docker image would send the source to the internet.