Fix: set privileged mode to true in the config.toml. No, really. (I thought I did, but apparently there was another runner config that it was actually using in that file.)