TIL that I didn't need --privileged when running Dagger Engine on apple/container, something I've needed with docker, nerdctl, podman, etc. Maybe you have a similar workload that could benefit.