* Only Tenant owner specification key is mandatory
* Increasing default timeout to avoid e2e flakiness on GH Actions
* Ensuring also empty Namespace annotations and labels
* Enabling Capsule to run on a cluster with PodSecurityPolicy enabled
* Supporting additional Role Binding per Tenant
* Documenting the additionalRoleBindings specification