Ideally, it would create a user inside the container with a user id and group id that match those *outside* the container.