Should we use `^docker:` to make sure that we don't match a group named, e.g. `bobdocker`?