Is it possible to customise how a Kubernetes service account is created?

Once created, is it possible to specify how it is stored?

I'd like to avoid storing the tokens as secrets if at all possible as I want them stored outside Kubernetes.