@David spoke with me and I could understand that the reason for this need is not just performance and the answer to my question is that the operator should watch just specific namespaces as it is done for Keylock via the env var. So, my purpose with this thread shows achieved. Really tks @David Ffrench.

The PR[1] for it is done already. Let's keep any further/specific discussion over the impl centralized on it.

Cheers,

[1] - https://github.com/aerogear/mobile-security-service-operator/pull/57