pass :disallow_sudo depending on the docker config