https://ones.com/blog/properly-set-docker-user-group-permissions-enhanced-security/