Now that Kubernetes 1.9 is generally available, we should figure out how we can use the new Admission Controllers features so that users don't have to use conduit inject. This probably needs a small design document covering how this would be productionized, with special attention to user experience.