Retrieves a token appropriate for linking the service account with a service account of a different service type. On most platforms this will return an OpenId token. May return a cached token, but will handle refreshing if necessary.