Pod Security Restricted Level

Namespace payments has the label pod-security.kubernetes.io/enforce: restricted. A Pod is rejected with: seccompProfile (pod or container "api" must set securityContext.seccompProfile.type to "RuntimeDefault" or "Localhost"). How do you fix it without weakening the namespace policy?