In order to get user switching working appropriately when the upstream Docker image has USER , I have used the following:

shell:
  inner: sudo su -c bash
  outer: bash

Trial and error has revealed that the outer shell cannot have a freeform input, but the inner shell can.