For non-CoCo we need a permissible kata-agent policy. Instead of asking the admin to set the initdata with permissable policy this should be handled automatically by the OSC operator based on the confidential feature flag.