Run as limited user (not root)

[amcclain]

The default official Tomcat image runs the Java process as root. We would like to run as a more limited user to stick to best practices, and expect this to be supported by the underlying image.