Run container commands as non-root