[kube-system]

I think most of them just don't customize their bios and use the default fully-wide-open implementations from the upstream bios vendor.