Istio NetworkPolicies don't allow API access

This is a bug caught in release testing/testing done by Kevin and Michael.

istiod requires egress to the API on startup.