Docker: use non-root user