* Enabling Capsule to run on a cluster with PodSecurityPolicy enabled * Supporting additional Role Binding per Tenant * Documenting the additionalRoleBindings specification