we would need to avoid having Flux ever try to drift-correct the CustomResourceDefinition spec/conversion/webhook/clientConfig/caBundle field

see #2806 (closed)