They see which permissions a ServiceAccount truly uses, which community connections a pod truly makes. [...]
