Private images

It seems clear to me that private Docker images should be kept in a private Docker registry, which has specific authentication and authorization on it. For instance, we (@ConjurInc) run a Docker registry in AWS which checks HTTP Authorization for all requests. We don’t use Docker hub for auth at all.