Having image as a field will allow running any random image as a host-networked pod which might have security consequences. Instead a pre-defined image should be used which will be able to run all the commands used in the kernel layer. This approach is similar to the one used in the network-tools layer.