bogus conditional dependency prevents the deployment of a workload cluster with 'monitoring' disabled

Today if you try to deploy a workload cluster with units.monitoring.enabled: false, you get:

unit 'kyverno' is declared with a dependency on disabled unit 'monitoring-crd'