We shouldn't enforce PSa in 4.14, neither by label sync, neither by global cluster config.

4.14

100%

As a cluster admin:
1. create two new namespaces/projects: pokus, openshift-pokus
2. as a cluster-admin, attempt to create a privileged pod in both the namespaces from 1.

pod creation is blocked by pod security admission

only a warning about pod violating the namespace pod security level should be emitted