Kubectl plugin to determine why a principal can perform an action. This is a simple wrapper around the Kubernetes `SelfSubjectAccessReview` API. The CLI format is modelled after the built-in `kubectl auth can-i`.
Currently, only SelfSubjectAccessReview is implemented. It would be nice to be able to also have support for SubjectAccessReview, so that it's possible to check why other prinicpals are allowed to perform actions.