https://ones.com/blog/knowledge/properly-set-docker-user-group-permissions-enhanced-security/