Default setting to keep ALL containers protects Rancher templates where run-once containers are used; in general Rancher will remove its own containers where necessary. User of Shell Wildcards allows more flexibility when specifying images to be kept during the sweep.