Docker by default installs a route to subnet 169.254.X.X. Droplet agent would better have specific 169.254.169.254/32 route preinstalled to avoid collision.