hardened rootless Traefik v2 deployment without mounting the Docker socket into the Traefik container