Portainer still needs to be run as rootful container? Then thanks, but no thanks.