Yes I think you are right --- I was mistaken. Docker without the rootless operate in the way I described.