---
pod:
mandatory_access_control:
type: apparmor
barbican-api:
barbican-api: runtime/default
init: runtime/default
barbican-test:
barbican-test: runtime/default
...