This is purely for testing, as running docker inside docker
requires further shenanigans, but at least it'll catch if we
ever break this role.