I have an use-case where I execute su-exec command from the entrypoint.sh script inside docker. Problem is that executed program can not open default tty device (in my case '/dev/pts/0') because it is still owned by root while su-exec command is running.
I did a workaround by manually changing ownership of tty device before running command, but maybe this could be resolved in su-exec?