[question] How can I override Kyverno policies for Signadot sidecar

The sidecar needs this permission which is prohibited by default: 
 
```
 securityContext:
      capabilities:
        add:
        - NET_ADMIN
      privileged: true
```