e <code>istio-init</code> container sets up the pod network traffic
redirection to/from the Istio sidecar proxy. This requires the user or
service-account deploying pods to the mesh to have sufficient Kubernetes RBAC
permissions to deploy <a href=https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-capabilities-for-a-container>containers with the <code>NET_ADMIN</code> and <code>NET_RAW</code> capabilities</a>.
Requiring Istio users to have elevated Kubernetes RBAC permissions is
p