Public search query: how to rotate Kubernetes service account tokens safely