Securing kube-controller-manager