Tune Kubernetes RBAC and account provisioning