skip caching namespaces at cluster scope if only watching single namespace add --watch-namespace-selector in user guide add e2e test