This plugin denies any kubectl exec and kubectl attach command escalated privilege mode. Pods with privilege mode have access to the host namespace, which could become a security risk.