Since #846, kas-container is downloaded by a job and stored in the persistent storage (as KAS_CONTAINER). However this seems unsafe since each job will override kas-container in the persistent storage. We should download kas-container in a workflow specific folder instead.