diff --git a/res/TRMNL Hackathon/Self host larapaper.md b/res/TRMNL Hackathon/Self host larapaper.md
index 9e4bc17..0316b79 100644
--- a/res/TRMNL Hackathon/Self host larapaper.md	
+++ b/res/TRMNL Hackathon/Self host larapaper.md	
@@ -28,7 +28,11 @@ services:
   transform-runner:
     container_name: transform-runner
     image: ghcr.io/spark-hpi/larapaper-serverless-runner:latest
-    security_opt: [seccomp=unconfined]
+    security_opt:
+      - seccomp=unconfined
+      # try adding the following flags if you get errors about permissions when executing transforms
+      # - no-new-privileges=false
+      # - apparmor=unconfined
     environment:
       - TRANSFORM_TIMEOUT=30 # maximum time a transform may run
       - TRANSFORM_MEMORY_LIMIT=134217728 # (128MB) the amount of memory a single transform may use, killed if the limit is exceeded