verification is always pulled if authentication information from an image pull is not yet present, thus enforcing authentication / re-authentication. This means an image pull might be attempted even in cases where a pod requests the `IfNotPresent` image pull policy, and might lead to the pod not starting if its pull policy is `Never` and is unable to present authentication information that led to a previous successful pull of the image it is requesting. ([#128152](https://github.com/kubernetes/k...

    <magic priority="55">
      <!-- Technically the header offset is stored at 0x3c, and isn't a -->
      <!-- constant, but it's almost always set to start at 0x80, 0xb0, -->
      <!-- 0xd0 or 0xf0. Will always have the MZ msdoc header too. -->
      <match value="MZ" type="string" offset="0">
         <match value="PE\000\000" type="string" offset="128"/>
         <match value="PE\000\000" type="string" offset="176"/>