use ENTRYPOINT - we want CMD to be not overidable