Learn how we leveraged Kyverno to take away RBAC-provided permissions, even from cluster-admins!