Solomon Boulos

(Recording this before I forget) Currently the caching of tokens is done inside the `ServiceAccountAccess` implementation, but it seems cleaner to have caching go on the "outside" of the TokenProvider...