ucm opens a credentials file in write mode when called from within docker

[nmcb]

A Dockerfile is trying to mount the host ucm credentials file as a secret to pull a private repo. This stopped working because there was a change to the credential file format and ucm opens the credentials file in write mode to update it. As long as my credentials file is in the right format I shouldn't run into this issue.