This plugin prevents any kubectl exec or kubectl attach commands from making pods escalate to privilege mode. Pods within privilege mode have access to the host namespace, which could become a security risk.