diff --git a/kubernetes/apps/kyverno/kyverno/policies/volsync-movers.yaml b/kubernetes/apps/kyverno/kyverno/policies/volsync-movers.yaml
index f238310b..6cfb9e9f 100644
--- a/kubernetes/apps/kyverno/kyverno/policies/volsync-movers.yaml
+++ b/kubernetes/apps/kyverno/kyverno/policies/volsync-movers.yaml
@@ -14,13 +14,17 @@ spec:
   rules:
     - name: set-volsync-movers-custom-config
       match:
-        any:
+        all:
           - resources:
               kinds: ["batch/v1/Job"]
-              namespaces: ["default"]
               selector:
                 matchLabels:
                   app.kubernetes.io/created-by: volsync
+          - resources:
+              kinds: ["batch/v1/Job"]
+              namespaceSelector:
+                matchLabels:
+                  volsync.backube/privileged-movers: "true"
       mutate:
         patchStrategicMerge:
           spec: