is there an example docker compose/k8s deployment of a netmaker server with client mode disabled? I'm trying to figure out what permissions/capabilities can be dropped when client mode is disabled.