A projected service account token looks valid and a custom API aggregation...

The pod has a token, yet one aggregated API path fails because the token audience does not match the audience that component now enforces.