Need kauth-level support for managed system account tokens that can be renewed

Currently, there is no way to renew system accounts, which Mesh Manager creates and manages. The resulting token is only valid for a year. When it expires, a new one must be created. This involves lots of management and manual intervention.

We would like a completely automated workflow that manages expiring tokens, so they can just set it and forget it.