[kube-system]

That doesn't solve the problem of needing a trusted communication channel. You'd still need one to exchange keys.