runtime container starts duoauthproxy directly by default