Create a MutatingAdmissionPolicy whose CEL sets privileged and hostPID on every pod spec.

Create a MutatingAdmissionPolicyBinding for it.

A policy with no binding never runs.

Mutating admission completes before validating admission, so Pod Security Admission evaluates the mutated pod and rejects it in a namespace enforcing baseline or restricted.

Where no namespace enforces pod security, the mutation stands and every new pod there runs privileged with host access.