Right now we mutate pods, however (I think) it would be more efficient to mutate Job (which has PodSpec Template). Of course this would eliminate pods created by other means, so I think a good approach might be to allow the user deploying the operator and webhook to choose, and perhaps use the more reasonable default.