I think this needs a design decision so that it wouldn't need to be ran as root. I really dislike containers that do that.