This message was deleted.

Doesn't look like you can run as non-privileged https://ranchermanager.docs.rancher.com/v2.7/pages-for-subheaders/rancher-on-a-single-node-with-docker#privileged-access-for-rancher

That's what I thought indeed. So we need to manage exception for this. Thanks.