As of this writing the maintain-kubeuser tests (VCR based) don't understand they could be run inside lima-kilo.
Examples of test failures:
- maintain-kubeusers expecting no users defined in the cluster, but some users being already present (defined via lima-kilo)
- a certain RBAC being configured (lima-kilo could interfere)
This task is to track the work to review / fix all this.