https://blog.aquasec.com/kubernetes-exposed-one-yaml-away-from-disaster