Fixes https://github.com/kubernetes/kubernetes/issues/59670
so it can be used for both new and legacy svcacct tokens. Also move the legacy validator into legacy.go.