Do not generally permit containers with allowPrivilegeEscalation

Pod Security Policy objects define a set of conditions that a pod must run with in order to be accepted into the system, as well as defaults for their related fields.