When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)

When creating a secure container image, which two items should you incorporate into the build if possible? (Choose two.)

A. Ensure that the app does not run as PID 1. B. Package a single app as a container. C. Remove any unnecessary tools not needed by the app. D. Use public container images as a base image for the app. E. Use many container image layers to hide sensitive information.