I agree we could use a token with more bits, but currently apiserver only listen on localhost:  ```go  \to.SecureServing.BindAddress = net.ParseIP("127.0.0.1")  \t// Disable insecure serving  \to.InsecureServing.BindPort = 0  ```