updated Dockerfile for trusted build, added exec in run.sh to handle termination signals appropiately