anchor.diff:  - `bound_service_account_namespaces` `(array: <required>)` - List of namespaces
     allowed to access this role. If set to "\*" all namespaces are allowed, both
     this and bound_service_account_names can not be set to "\*".
  +- `audience` `(string: "")` - Optional Audience claim to verify in the JWT.
   
   <%= partial "partials/tokenfields" %>
   
  
positive.code: 
  ### Sample Response
  
  ```json  
  {
    "data": {
      "keys": [
  
negative.code:     JWTs. If a certificate is given, its public key will be
      extracted. Not every installation of Kubernetes exposes these
      keys.
    - `issuer` `(string: "")` - Optional JWT issuer. If no issuer is specified, then this plugin will
      use `kubernetes.io/serviceaccount` as the default issuer.
  
  ### Sample Payload
  
  