It has RBAC, service accounts, and Secrets all with APIs. I guess you could automate provisioning storage accounts on nodes or have a system that creates tokens

It has RBAC, service accounts, and Secrets all with APIs. I guess you could automate provisioning storage accounts on nodes or have a system that creates tokens with the cluster key. Not sure that's really any better than not using it, though