total_hits result. A failure in any check makes verification fail. The session
travels to the container through stdin instead of a Compose shell command or
process argument.
If a session does not already exist, the verifier can create one from a password
file:
--disposable for a retained site. Rotate the bootstrap credential,
use a purpose-limited account where possible, and remove temporary credential
files after the run.
