code: func (s *mustRunAs) Generate(pod *api.Pod, container *api.Container) (*int64, error) {
  	return &s.opts.Ranges[0].Min, nil
  }
docs: // Generate creates the uid based on policy rules.  MustRunAs returns the first range's Min.