How would you secure a Kubernetes cluster from the ground up?