Can't get nmap to work inside Docker

This is my config

- platform: nmap_tracker
  hosts:
    - 192.168.x.xxx-xxx
  interval_seconds: 45
  scan_options: " -PR -n --privileged -F --host-timeout 5s"

It is not clear to me if by adding scan_options you are replacing the default scan_options or adding to them.

With Debug logging I get:

2018-12-11 18:29:20 INFO (SyncWorker_12) [homeassistant.components.device_tracker.nmap_tracker] Scanning...,
2018-12-11 18:29:20 INFO (SyncWorker_12) [homeassistant.components.device_tracker.nmap_tracker] nmap scan successful,
2018-12-11 18:29:20 DEBUG (SyncWorker_12) [homeassistant.components.device_tracker.nmap_tracker] Nmap last results []

Which looks like an empty array to me.

When I comment out the scan_options then I get the following in the log file, which I interpret as the command is not running under sudo:

2018-12-11 18:39:41 INFO (SyncWorker_11) [homeassistant.components.device_tracker.nmap_tracker] No MAC address found for 192.168.1.xxx,
2018-12-11 18:39:41 INFO (SyncWorker_11) [homeassistant.components.device_tracker.nmap_tracker] No MAC address found for 192.168.1.xxx,
2018-12-11 18:39:41 INFO (SyncWorker_11) [homeassistant.components.device_tracker.nmap_tracker] nmap scan successful,
2018-12-11 18:39:41 DEBUG (SyncWorker_11) [homeassistant.components.device_tracker.nmap_tracker] Nmap last results []