Avoid privileged continers and disable privileges escalation

1 job for restrict-privileges in 1 minute and 16 seconds (queued for 1 second)