master container command now runs in privileged mode