// loading a kernel module with CAP_SYS_MODULE.
  // When set to false, a new userns is created for the pod. Setting false is useful for
  // mitigating container breakout vulnerabilities even allowing users to run their
  // containers as root without actually having root privileges on the host.
  // This field is alpha-level and is only honored by servers that enable the UserNamespacesSupport feature.
  // +k8s:conversion-gen=false