Probably should add a shell script as entrypoint to take care of this. And maybe add a `--output-dir` option to `secrender`.