You also need to be root to manage your init process and in production, this is how Docker is treated. That said, I've seen work being done to add RBAC, given t

You also need to be root to manage your init process and in production, this is how Docker is treated. That said, I've seen work being done to add RBAC, given there are a set of users that desire this.