Possible generic metrics:

• overall success, failure, error count
• overall latency
• per authenticator success and error count
• per authenticator latency

Authenticator specific metrics:

• Expired service account tokens observed.
• TTL of succesfully authenticated client certs observed during authentication,
• Count of expired client certs observed during client authentication that would have otherwise been authenticated.

/sig auth
/kind feature