Policy-Based Namespace Restriction

Define site-wide policies for which namespaces a container is allowed to create or join.