OpenAI's SWE-bench harness relies on unisolated host Docker sockets