Enforce Docker/Node Best Practices

[quisido]

https://github.com/nodejs/docker-node/blob/master/docs/BestPractices.md

Specifically, non-root user permissions.