This change fixes the documented certificate generation step for taskd by running ./generate.client through gosu taskd instead of invoking it directly. That makes the setup instructions better match how the container is meant to be used and helps avoid permission or ownership issues when creating client credentials. The practical effect is a smoother, less error-prone onboarding flow for anyone setting up taskd users.