[WM] expose other ports (just SSH for now) when running from wercker build
[WM TH] remove 'sudo -E' from docker commands

Wercker folks say it is no longer needed.