Upgrade to Alpine 3.16.3; Make setup, admin and rspamd run without root privs.