Allow user to override the service account used in jwt signing

Code currently assumes server@... is used. That may not reflect either our current best practices documentation or what the customer has actually setup.