anchor.diff:  can be revoked by deleting the secret. When the secret is deleted, a new one is
   automatically generated to take its place.
   
  +ifdef::openshift-online,openshift-origin,openshift-dedicated,openshift-enterprise[]
   [[managing-allowed-secrets]]
   == Managing Allowed Secrets
   
  
positive.code:   - "system:serviceaccounts:top-secret"
  ----
  ====
  
  [[using-a-service-accounts-credentials-externally]]
  == Using a Service Account's Credentials Externally
  
negative.code: serviceaccounts/robot
  ----
  ====
  endif::[]
  
  [[managing-service-account-credentials]]
  == Managing Service Account Credentials
  