- Use privileged container instead of just adding the sys_admin capability (the latter has been shown to be cause unrelated issues).