Dockerfiles template does not set USER. Kubernetes security best practices suggest running container processes as non-root.