Kyverno manifests are incompatible with the restricted Pod Security
Standards included with Kubernetes 1.22 and 1.23 because the Pod
Security admission controller looks for "ALL" in securityContext.capabilities.drop,
but does not accept "all".
1b741f89aa/policy/check_capabilities_restricted.go (L88)
Signed-off-by: Ryan White <ryan@alzabo.io>