fix(sa): only sync active service accounts (#311)

fix(sa): only sync active service accounts (#311) #589