Add an admission controller that forces every container's image pull policy to Always when a pod is created.