While the operator, system and generator pods should support running with their apiexport-generated scoped kubeconfigs when platform-mesh/security-operator#481 is solved, the initializer and terminator need more investigation. They don't use the apiexport-provider and the simple generated kubeconfigs don't work out of the box, even when the issue with how we used to build clients from URLs is resolved.