Because Docker can have different UIDs depending on the system, the encapsulating container needs a bootstrap script to dynamically update the container's GID to match the ID on the docker socket. This could fix permission issues when migrating the container to new systems without needing to run the container as root.