Picture this: a production cluster goes sideways at 2 a.m., and half the team dives in through kubectl to “see what’s happening.” Ten engineers, one namespace, absolute chaos. You get drift, ghost edits, and a sleepless incident review. This is exactly where kubectl command restrictions and enforce access