Dockerfile security best practices: treat is as you would treat any linux server. :)