Goal: 

• Cloudkitty related containers need to run with the least privileges possible. The privileges should be adjusted and reasons for leaving some of the privileges need to be documented.

Acceptance Criteria:

PR is proposed and passes CI