At the moment, we apply all pre-conditions to most commands (e.g. needing the docker socket mounted for commands like encrypt)
We should be much more selective with our preconditions such that you don't need every precondition to be met for commands that don't rely on them.