Limit the images that allowed to run as ephemeral containers using wildcard patterns (i.e *).