spec: ensure only root and user have interactive shells
spec: clarify wording in output for dockerfile
spec: ensure app image exports volumes