# Functions

NewDenyExecOnPrivileged creates a new admission controller that denies an exec operation on a privileged pod.