Provide config option to ignore child objects

[cmacrae]

If child objects are created in the API by a user controlled manifest (such as a ReplicaSet that's created by a user defined Deployment) it's possible that a violation will be observed, in addition to the parent (depending on the policy, of course).

This may not be desirable in some cases, so it'd be nice to have something like a ignore_children: true option.

This can be checked for in the metadata.ownerReferences field of the manifest. For example:

	"ownerReferences": [
	    {
		"apiVersion": "apps/v1",
		"blockOwnerDeletion": true,
		"controller": true,
		"kind": "Deployment",
		"name": "violation-deployment",
		"uid": "32715671-2d99-4a0d-8fde-800207ef4532"
	    }
	]