FATAL: Runner configuration other than name and executor configuration is reserved

I've tried to use the GitLab Runner Operator to create a runner with the new authentication token workflow. I've created the token in the UI, added a new secret with a runner-token field and used this runner cr and custom config:

apiVersion: apps.gitlab.com/v1beta2
kind: Runner
metadata:
  name: gitlab-auth-runner
spec:
  buildImage: alpine
  ca: ...
  gitlabUrl: ...
  tags: dev2
  token: gitlab-runner-auth-secret

The container fails on startup with:

FATAL: Runner configuration other than name and executor configuration is reserved (specifically --locked, --access-level, --run-untagged, --maximum-timeout, --paused, --tag-list, and --maintenance-note) and cannot be specified when registering with a runner authentication token. This configuration is specified on the GitLab server. Please try again without specifying any of those arguments. For more information, see https://docs.gitlab.com/ee/ci/runners/new_creation_workflow.html#changes-to-the-gitlab-runner-register-command-syntax

Version: 1.20 k8s: OpenShift 4.12