Sure will let you know, current setup is quite secure but not bullet proof Kimi K3 review: The codebase is unusually well hardened for a multi-tenant app platform — PSS restricted/baseline per namespace, read-only root FS, drop: ALL, capped emptyDir scratch, no SA tokens in tenant pods, encrypted config at rest, fail-closed billing gate