fixes CC-591: lock apt-get docker dependency to 1.3.3