NoDevices- defaults when no type and no selectors are specified
AllDevices- schedule on all available devices
Conditional- defaults when no type but selectors are specified
devicesconfig enables that. For example, a specific block storage device or loop device or audio device can be added to an otherwise unprivileged container and have the application directly access it.