TigerGraph's default container gives away SSH access, and the vendor has no fix out
Four default settings in tigergraph/community:latest compose into command execution as the database's own service account, using no secret that is not already public.