{
  "bound_service_account_names": "{{ openbao_k8s_agent_sa }}",
  "bound_service_account_namespaces": "{{ openbao_k8s_agent_ns }}",
  "token_policies": ["ai-agent-ssh"],
  "token_ttl": "10m"
}