Restrict docker rights for `geokrety` user

[kumy]

It would be nice if the user geokrety could be able to manage only containers he is responsible for.

[kumy]

A dedicated _generic_project was started: https://github.com/kumy/docker-leash