Potential insecure secret reference

[debuggerchen]

The Terraform CRD can reference many kinds of credentials in other namespaces, which may be a security risk, as a namespace-scoped user can leverage this to access unauthorized secrets. Perhaps we can leverage Webhook/CEL for better authorization?