Moved several images to run as a user instead of root. Switched to scratch image instead of busybox for data-only volumes