In the docker world it's best practice to let a containerized service run as non-root. [For example Postgres create a `postgres` user and then in the Dockerfile use `USER postgres` to let the workload run under that user.](https://docs.docker.com/engine/examples/postgresql_service/). I recommend you also introduce such a user for the official ArangoDB container images.