Fix reconstitution to handle non-temporary directory locations. Initial support for specifically selecting files in non-shared mode
Provide security fixes for docker runs to avoid injection targets: pass commands as list to subprocess instead of string, environmental variables specified through docker, user creation moved into separate createsetuser script within docker container. Thanks to @jwm