sys-cluster/kubeadm: security cleanup