[Security Hardening] Level 9 Minimal RBAC

[zwindler]

Strip exec/describe/get permissions for Level 9 (RBAC Blackout):

• Allow only events access
• Force player to use kubectl get events