providers/docker: make sure command isn't scoped