supervisor needs to run as root because of docker