Restricting User-Controlled Kubernetes Pods