ClientForMetadataTokenRequestEmptyAud returns a manager.ClientForMetadataFunc that returns a cert-manager rest client whose authentication is built using the passed empty audience ("") token request in the metadata VolumeContext.

EmptyAudienceTokenFromMetadata returns the empty audience service account token from the volume attributes contained within the metadata.