docker: coalesce tomcat ownership commands