Use true rootless docker

[quinn]

https://docs.docker.com/engine/security/rootless/

This is more secure than just adding current user to docker group. Also docker commands will default to current user instead of root