--sys-debug if set the api will log more verbose information about internal events
--audit-trace if set, and tty was requested all keystrokes will be logged (otherwise the async auditer will merge keystrokes into command on each new lines)
--bypass-user repeatable flag for adding users to bypass list so they can use the standard exec command, handy for system users like system:admin (--by-pass-user is still accepted but deprecated)
--bypass-shared-key this flags needs to be set if one runes more then one replica of rexec api, so the shared key between the apiservice part and the validatingwebhookpart are matching, otherwise said hey is autogenerated, it has to be a RFC 4122 compliant uuid (--by-pass-shared-key is still accepted but deprecated)
--max-strokes-per-line with this flag we can alter the treshold we have on a linelength before async audit flushes, keep in mind the increasing it too high might lead oom kills on the rexec server
--cluster-domain cluster DNS suffix for the kubernetes apiserver service (e.g. corp.internal instead of cluster.local). When unset, CLUSTER_DOMAIN env is used, then cluster.local. Dialing uses KUBERNETES_SERVICE_HOST when present.