How to build small and secure Docker images for Rust (FROM scratch)