Allow user 'apim' to run docker