Do we need a Webhook/CEL for ReplicationSecrets

[debuggerchen]

Currently the ReplicationSecrets may allow namespace-scoped users to access secrets in unauthorized namespaces. Should we add some Webhook/CEL to check whether users have permissions in another namespace?