- Allow the managed database tunnel bind only for the internal connector container
- Keep the connector tunnel mount read-only and reject broader bind access