Drop unecessary privileges: https://www.redhat.com/en/blog/secure-your-containers-one-weird-trick