This is one of the difficulties of administration. You could of course also manually enter each docker container and update these for the users. Anyhow, if people have already significantly changed their docker container, then anyways you will run into troubles. So you might just think about forcing a logout of all users, e.g. by invalidating their login, see How to force re-login for users for more information on that.