Trusted docker build of arvados