This is only applicable for unmanaged clusters, as
we don't yet have a way of ensuring a user doesn't
supply a namespace they shouldn't have access to
(eg. a different project's namespace).