Multitenancy: allow non default service account when privileged is set to false.

[nikParasyr]

Is your feature request related to a problem ?

Currenly when enabling multi-tenancy the --default-service-account flag is always set. This works well when fluxcd is deploying to one cluster, but doesnt work that well when fluxCD deploys to multiple clusters (in my case through cluster-api).
So, when the user defines spec.kubeconfig.secretRef.name to point to a workload cluster the SA account gets also set (to default or something else) which blocks all deployments. Setting it to a non default SA doesnt solve the issue.

Describe the solution you'd like.

In my understanding when multitenancy.priviledged is set to false the fluxCD components are not priviledged and can only impersonate. Therefore, not defining a service-account should not be an issue in terms of security and isolation.
So, i would like to be able to not set the default SA when multitenancy is enabled AND priviledged is set to false

Describe alternatives you've considered.

Not much tbh

Additional context.

No response