Kubernetes Pod Spec: Better Defaults & Security