do not rely on docker role to supply client...