Docker supports unprivileged containers too.