EMA is a Docker container. You should control who is allowed to run Docker commands. For more information, see https://docs.docker.com/engine/security/security/.