Linux user group assignments in Docker (discrepancy between “building stage” and “running stage”)

Question

I would like to have a user (username: myuser) which can read a certain file (TLS.key) and separate user (username: untrusted) which h