GCSFuse + Docker Compose permissions

[jrmerz]

Currently in production we are having to run the iiif container in privileged mode. There are examples online that say this should work but doesn't:

    cap_add:
      - SYS_ADMIN
    devices:
      - /dev/fuse
    security_opt:
      - seccomp:unconfined