Not detecting system:serviceaccounts Group assigned RBAC

[macox]

A ClusterRoleBinding that has a group of system:serviceaccounts specified will give all other service accounts on the cluster the clusterrole permissons configured in the CusterRoleBinding.

Having visibility of this would be very useful.