Sudocker allows one to restrict which user can run which docker command without the user being member of the docker group.