How to enable auto CSR approval for kubelet server certificates?

It turns out auto approval for server CSRs was removed.

So much for that.