Add an admission controller that forces every container's image pull policy to
Always when a pod is created.