A Docker image that runs a command as a provided user and optional group.