code: func (m *Manager) DeleteServiceAccountToken(podUID types.UID) {
  	m.cacheMutex.Lock()
  	defer m.cacheMutex.Unlock()
  	for k, tr := range m.cache {
  		if tr.Spec.BoundObjectRef.UID == podUID {
  			delete(m.cache, k)
  		}
  	}
  }
docs: // DeleteServiceAccountToken should be invoked when pod got deleted. It simply
  // clean token manager cache.