use own user instead of root inside of container

[chris34]

• own user
• make secrets only readable by that user (see https://docs.docker.com/compose/compose-file/compose-file-v3/#long-syntax-2 mode, gid, uid)