We don't need to build our own container image anymore, since the new *pyrocufflink.blue* domain controllers use LDAPS certificates signed by Let's Encrypt.
