Non-root check for Docker image