Given that this cronjob uses the `latest` tag, using `Always` as pull
policy should make sure that it actually uses and up-to-date version.