or have an init container do it