Self-Service Allowlisting of Privileged Apps on GKE Autopilot