non-root users can only create directory-backed containers