How to set KernelManager.transport to ipc in Jupyterhub/singleuser docker container?

I’m going through the list of security recommendations here: https://jupyterhub.readthedocs.io/en/stable/reference/websecurity.html

It recommends setting KernelManager.transport to ipc. How do I do that with the Jupyterhub/singleuser docker container? It seems that I should set it on the jupyter notebook command line, but I’m not sure how to add that to the docker image. Can I just add it to the start-notebook.sh args?

“Args”: [
“start-notebook.sh”,
“–ip=0.0.0.0”,
“–port=8888”,
“–notebook-dir=/home/jovyan/work”
],