Add support to ignore config access entities

[yashmehrotra]

• Ignore system:controller roles/clusterroles (and follow the tree) -> Put this in k8s chart for things to ignore (use match items)
• Ignore service accounts who have no access