---
pod:
  mandatory_access_control:
    type: apparmor
    metacontroller:
      metacontroller: runtime/default
...