code: func New(kubeConfigFile string, implicitAuds authenticator.Audiences) (*WebhookTokenAuthenticator, error) {
  	tokenReview, err := tokenReviewInterfaceFromKubeconfig(kubeConfigFile)
  	if err != nil {
  		return nil, err
  	}
  	return newWithBackoff(tokenReview, retryBackoff, implicitAuds)
  }
docs: // New creates a new WebhookTokenAuthenticator from the provided kubeconfig
  // file. It is recommend to wrap this authenticator with the token cache
  // authenticator implemented in
  // k8s.io/apiserver/pkg/authentication/token/cache.