before creating it.

This avoids apiserver crashloops if a webhook rejects namespace
creation when the apiserver is rebooted.