sa: Allow empty policy to indicate parent user's policy is inherited (#9185)

cmd/utils.go

@@ -620,10 +620,14 @@ func getMinioMode() string {
 	return mode
 }
 
-func iamPolicyClaimName() string {
+func iamPolicyClaimNameOpenID() string {
 	return globalOpenIDConfig.ClaimPrefix + globalOpenIDConfig.ClaimName
 }
 
+func iamPolicyClaimNameSA() string {
+	return "sa-policy"
+}
+
 func isWORMEnabled(bucket string) bool {
 	if isMinioMetaBucketName(bucket) {
 		return false