functions.sh: use docker group for client instead of sudo