Injected pods with 'istio-init' containers violate require-non-root-group policy

There are some namespaces/resources, not included in exclusions, which are injected with the 'istio-init' initContainer that violate the 'require-non-root-group' policy.