code: func isRequired(pod *v1.Pod) bool {
  	for key, value := range pod.Annotations {
  		if strings.HasPrefix(key, ContainerAnnotationKeyPrefix) {
  			return value != ProfileNameUnconfined
  		}
  	}
  	return false
  }
docs: // Checks whether app armor is required for pod to be run.