code: func profileForContainer(pod *api.Pod, container *api.Container) string {
  	containerProfile, ok := pod.Annotations[api.SeccompContainerAnnotationKeyPrefix+container.Name]
  	if ok {
  		return containerProfile
  	}
  	return pod.Annotations[api.SeccompPodAnnotationKey]
  }
docs: // profileForContainer returns the container profile if set, otherwise the pod profile.