-
https://spiffe.io/docs/latest/try/getting-started-linux-macos-x/
-
https://github.com/JackOfMostTrades/spiffe-user-demo, or something like it.. basically have a front end app create SVID (?) cert that represents an end user instead of a calling service's service account, and then pass that around.