Error after docker upgrade: "docker: Error response from daemon: OCI runtime create failed"

After upgrading docker and docker cli (CentOS 7), a previously working container decided to bomb out with the following error: 

docker: Error response from daemon: OCI runtime create failed: container_linux.go:349: starting container process caused "process_linux.go:449: container init caused \"write /proc/self/attr/keycreate: permission denied\"": unknown. 

 It turns out that container-selinux also needs to upgraded to match.  

e.g. run yum upgrade docker-ce.x86_64 docker-ce-cli.x86_64 container-selinux