Vault secret operator and ephemeral containers

Hi!
I noticed you manage pretty well to disallow ephemeral containers in the vault-sercret-operator.
How do you do that? Is there a “workaround” on it?

Thanks!