code: func assignSecurityContext(provider psp.Provider, pod *api.Pod) field.ErrorList {
  	errs := field.ErrorList{}
  
  	if err := provider.MutatePod(pod); err != nil {
  		// TODO(tallclair): MutatePod should return a field.ErrorList
  		errs = append(errs, field.Invalid(field.NewPath(""), pod, err.Error()))
  	}
  
  	errs = append(errs, provider.ValidatePod(pod)...)
  
  	return errs
  }
docs: // assignSecurityContext creates a security context for each container in the pod
  // and validates that the sc falls within the psp constraints.  All containers must validate against
  // the same psp or is not considered valid.