https://docs.aws.amazon.com/eks/latest/userguide/service-accounts.html#identify-pods-using-stale-tokens I think need a feature to refresh the tokens within an hour?
