code: func NewDenyEscalatingExec() *DenyExec {
  	return &DenyExec{
  		Handler:     admission.NewHandler(admission.Connect),
  		hostNetwork: true,
  		hostIPC:     true,
  		hostPID:     true,
  		privileged:  true,
  	}
  }
docs: // NewDenyEscalatingExec creates a new admission controller that denies an exec operation on a pod
  // using host based configurations.