--privileged flag not needed when running shallow dind