Spent a few days playing with this. I was able to correct my issue by editing the docker settings. Setting keys 17 (umask), 18 (puid), 19 (guid) to 000, 0, 0 respectively. Tested as well, PIA is still reporting correctly. If using OVPN, I had the most success using the older .ovpn file and both certs.