Ingress nginx annotation injection causes arbitrary command execution