controller loop removes service account token secrets that have not been used
  in the time specified by `--legacy-service-account-token-clean-up-period` (defaulting
  to one year), **and are** referenced from the `.secrets` list of a ServiceAccount

pkg os/user, type User struct, Name string
pkg os/user, type User struct, Uid string
pkg os/user, type User struct, Username string
pkg path, func Base(string) string
pkg path, func Clean(string) string
pkg path, func Dir(string) string
pkg path, func Ext(string) string
pkg path, func IsAbs(string) bool
pkg path, func Join(...string) string
pkg path, func Match(string, string) (bool, error)