See [CCI docs](https://circleci.com/docs/2.0/executor-types/#docker-image-best-practices). In short, while unauthenticated docker image pulls may work, this is not guaranteed in the future.
