This is purely for testing, as running docker inside docker requires further shenanigans, but at least it'll catch if we ever break this role.
