services:
  your_service:
    image: your_image
    security_opt:
      - no-new-privileges=false