Restricting pods to access certain volume types