kubernetes: use namespace selector where possible

[ribbybibby]

We can use a namespace selector to only list secrets in the target namespace, unless its a glob pattern.

Fixes #159.