Security contexts
Running non-root and dropping capabilities.
In plain terms
A security context is the safety gear you make a container wear: no working as the boss (root), no climbing to higher access, and only the one tool it genuinely needs in its belt.