Make it extra clear that the `docker` group is root-equivalent.