Allow docker group to run pipework, etc