The official entrypoint re-executes itself as mongodb (uid 999) and only then reads MONGO_INITDB_ROOT_PASSWORD_FILE, so a root-owned 0600 file is 'Permission denied' at line 83 and the server never starts. secrets-owner is the mechanism ADR 0086 gives for exactly this.