Using ARG in a Dockerfile – beware the gotcha