run Docker containers as user srclib, not root