:whale::closed_lock_with_key: Docker-gen friendly Certbot docker image that runs with a non-root user.