code: func tokenReviewInterfaceFromKubeconfig(kubeConfigFile string) (authenticationclient.TokenReviewInterface, error) {
  	localScheme := runtime.NewScheme()
  	if err := scheme.AddToScheme(localScheme); err != nil {
  		return nil, err
  	}
  	if err := localScheme.SetVersionPriority(groupVersions...); err != nil {
  		return nil, err
  	}
  
  	gw, err := webhook.NewGenericWebhook(localScheme, scheme.Codecs, kubeConfigFile, groupVersions, 0)
  	if err != nil {
  		return nil, err
  	}
  	return &tokenReviewClient{gw}, nil
  }
docs: // tokenReviewInterfaceFromKubeconfig builds a client from the specified kubeconfig file,
  // and returns a TokenReviewInterface that uses that client. Note that the client submits TokenReview
  // requests to the exact path specified in the kubeconfig file, so arbitrary non-API servers can be targeted.