# Kubernetes: de-privileging the clone step