If the package is named `*istio*` then we don't install istio. Then we try to create the secret in `istio-system` no matter what....which works for `istio-controlplane`, but not the operator since `istio-operator` installs in the `istio-operator` ns.