well, the securityContext issue is just a symptom of a bigger issue, which is that the containers should run with GID 0