builder/docker: can login to pull