added -mesos_user=root to allow executor to access docker socket