Each manifest declares container requirements (host network, NET_ADMIN) for connectivity_manager.py to use when launching exit tunnel containers. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>