provision/docker: trimming the public key in the container command