As a bonus we can now run "suricata-update" using docker-exec, triggering both a rule update and a Suricata rule reload.