proof: `docker exec` into any running session and check `groups`
proof:
docker execinto any running session and checkgroups