Abuse a mounted Kubernetes service account token

A shell in a pod usually has a service account token; check what it can do against the API before anything else.