Is it a recommended way to use webhook to inject sidecar container? If yes, webhook service must be very stable. If webhook has something wrong, It will be a disaster, as it can not create pod any more. So there are some other best practice?