There are also “debug” versions of the images that do have a shell, like authzed/spicedb:v1.12.0-debug. But as Jake said, you shouldn’t need them for setting flags