Dockerfile: using hardened conf