Currently the namespace-scoped NifiCluster can reference secret in other namespaces, which may enable a namespace-scoped user to access secrets in his unauthorized namespaces. Perhaps we can leverage webhook/cel to authorize user for better security?