Can I include nested objects / arrays in my securityContext?

You can nest your arrays/objects as deep as you like. Your securityContext is made up of any arbitrary JSON, so if it’s valid JSON, it’ll work.