got a quick question: does k8s pulumi support "kubectl user impersonation", so something like

kubectl --as=system:serviceaccount:ns-sourcegraph:fake-user -n ns-sourcegraph apply -k .

where fake-user is a service account with some policies attached.