Understanding Docker Swarm resource scoping