inherit-working-directory -> access-working-directory
image -> subuser + add serial-devices permission