## What - Add explanation, why kube-rbac-proxy rewrites requests before authorization (untrusted). ## Why - kube-rbac-proxy rewrites requests that are not authorized. - It then authorizes the mutated request.