Update Dockerfile with dedicated heka user and perms