code: func (s *serviceAccount) enforceMountableSecrets(serviceAccount *corev1.ServiceAccount) bool {
  	if s.LimitSecretReferences {
  		return true
  	}
  
  	if value, ok := serviceAccount.Annotations[EnforceMountableSecretsAnnotation]; ok {
  		enforceMountableSecretCheck, _ := strconv.ParseBool(value)
  		return enforceMountableSecretCheck
  	}
  
  	return false
  }
docs: // enforceMountableSecrets indicates whether mountable secrets should be enforced for a particular service account
  // A global setting of true will override any flag set on the individual service account