Make buildpack cartridge run as non-root