Explain that the base image expects to run as non-root and the implications of this, and expand the example 'docker run' options in detail.