Thanks for the additional information. IME this is a bug in the docker interface. Currently it is not marked as an implicitOnClassic slot, but it should be since, like our libvirt interface. I’ve taken a todo to implement this for snapd 2.44 (the next release). In the meantime, please use devmode until 2.44, then strict mode should work for you.