It would be nice to have a namespaced resource (instead of entire cluster) for image policies. For example I want to say a images can only be verified if in the a namespace, and b images only in the b namespace.