Add docker_env group and make container_environment scripts group-readable