Pulling container images from private registries (including Docker Hub) with a Kubernetes Kubelet Credential Provider