Kubernetes entities as security boundaries