What are the key differences in process isolation between Docker and Vagrant