In one mock test, the snapshotter needs permission to read secrets. That was disabled in the RBAC files of recent releases. We need to patch it back in during deployment.