docker/internal TLS: spawn extra container for glance API's TLS proxy