docker: make haskell a system user