Allow container to run as unprivileged user