allow arbitrary shell commands to run in the container