Drop root permissions in entrypoint of dockerfile

I need to fetch a certificate and update my CAs when my dockerfile starts.