Implement other docker runtime features

[dleehr]

As noted in

https://github.com/Duke-GCB/calrissian/blob/b4526afa79ab4d0a5e766d068dbd3acf0ba20d4b/calrissian/job.py#L253

DockerCommandLineJob.create_runtime() builds up some additional docker command flags (read-only container filesystem, custom network access, matching user, etc)

Some of these may be necessary/appropriate. Should research/triage/implement as needed