You should pass the `runconfig` directly to `setupPrivateFiles and keep it out of the `Container` struct entirely.