Constant ALLOWED_USER_SECRET_PREFIX 

pub const ALLOWED_USER_SECRET_PREFIX: &str = "bindy-";

Required name prefix for any Secret that the user references via a secret: volume. Prevents the user from mounting an arbitrary Secret (including the operator’s own credentials) into the BIND9/bindcar pod.