li><li><strong>Added</strong> support for generating <code>PKCS#8</code> private keys in Citadel agent (<a href=https://github.com/istio/istio/issues/19948>Issue 19948</a>).</li></ul><h2 id=minor-enhancements>Minor enhancements</h2><ul><li><strong>Improved</strong> injection template to fully specify <code>securityContext</code>, allowing <code>PodSecurityPolicies</code> to properly validate injected deployments (<a href=https://github.com/istio/istio/issues/17318>Issue 17318</a>).</li><li><strong>Added</st