Apply/remove security resources (RBAC, NetworkPolicies, Finalizers) based on current level: - Centralized orchestration - Clean transitions between levels