Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno