Docker provides an isolated and consistent environment for your programs to run in. Subuser gives your desktop programs access to the resources they need in order to function normally.
Subuser turns Docker containers into normal linux programs

Applied Crypto Hardening
https://bettercrypto.org/static/applied-crypto-hardening.pdf