I’m packaging a GUI (X11) app to be used like a kiosk system (only single app is running on X). I used the resin-electronjs as a base, but noticed that it seems to run the app as root. Security-wise it would be better to use non-root user when running apps in a container. How should I proceed? Use systemd to bring up a X server or … ?