Better Authorization

[debuggerchen]

Perhaps it's better add some webhook to authorization user permission before syncing, otherwise may enable namespace-scoped users to access secrets in unauthorized namespaces.