We should be running the container as a separate user rather than root for a number of both security and isolation issues.