code: func NewDenyExecOnPrivileged() *DenyExec {
  	return &DenyExec{
  		Handler:     admission.NewHandler(admission.Connect),
  		hostNetwork: false,
  		hostIPC:     false,
  		hostPID:     false,
  		privileged:  true,
  	}
  }
docs: // NewDenyExecOnPrivileged creates a new admission controller that is only checking the privileged
  // option. This is for legacy support of the DenyExecOnPrivileged admission controller.
  // Most of the time NewDenyEscalatingExec should be preferred.