entrypoint-demoter. Container entry point that can demote uid and gid from environment variables or matching directory