For policies in audit or warn mode, set failure policy automatically to Ignore

Policies that are in audit or warn mode do not need to block admission into Kubernetes clusters. They should automatically have their failure policy set to ignore mode.

Suggest a _helper.tpl function be added for setting failure policy so this and #7 (closed) can be implemented cleanly