[backport-1.4]: validating-admission-policies unit should be enabled in workload clusters.

A solution for issue #2822 (closed) needs to be backported to 1.4.x