don't copy securitycontext from first container if configmap found
