IMPORTANT: - Ensure that the actual FCGI only runs as an unprivileged user DESIRABLE: - remove all dev tools from the output container image - prune any undesired bloat from the image to save space