Harden the images

[RemcoSpigot]

Describe the solution you'd like
Harden the images to make sure that:

• The container runs as non-root
• No commands are available that shouldn't be available
• The user can only read the files that are in it's workdir

Tbd.

Describe alternatives you've considered
None

Additional context
None