---
pod:
  mandatory_access_control:
    type: apparmor
    daemonjob-controller:
      controller: runtime/default
...