add missing allowPrivileged flag for kubelet