Avoid running a containerized app as root