The replacement for PodSecurityPolicies. Three policies: Privileged (wide open), Baseline (minimally restrictive), Restricted (hardened).