RunConfig overrides the runtime configuration taken from the Docker image. Every sandbox created from the snapshot runs as the image's USER, in its WORKDIR, with its ENV beneath the sandbox's own env_vars; user and work_dir given here replace the image's, and env_vars merge over it.
interface RunConfig