Daryn Sharp noticed that token operations are acquiring the fsn write lock. Like lease renewal and token expiration, the read lock is sufficient because the namesystem is not mutated.
Add more information to longest write/read lock held log
Reduce synchronization in the token secret manager
Reduce UGI overhead in token ops
GitHub Pull Request #2531