Practice RBAC checks for pods exec, logs, scale, RoleBinding scope, service account identity, and least-privilege reviews.