Nginx: master process as root
Removing /dev/stdout hacks in order to make completely unprivileged nginx work. This is deemed an unnecessary precaution for its master process, which is then further mitigated with Docker's user namespaces going forward.
Works around:
Container is now verified to run in Docker 1.12+ with user namespaces enabled and selinux in enforcing mode