Comment 1 for bug 1902010

I'm indeed not at all keen on passing through free-form shell code, and would like to see an analysis of why this sort of thing has to be done via ARG values at all rather than being computed by the Dockerfile.