Can we assume "nemo" uid/gid is available and stable both at image create and runtime?