### Description

Currently, the [`tryAuthenticateToken`](https://github.com/elastic/elasticsearch/blob/55088d154d1764a6d4fa8e9078bde9da1e9ff9a5/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java#L458) method calls `decodeAndValidateToken` which ends up sending two `GetRequest` for the same token ID. First in [`decodeToken`](https://github.com/elastic/elasticsearch/blob/55088d154d1764a6d4fa8e9078bde9da1e9ff9a5/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java#L602) and second in [`checkIfTokenIsValid`](https://github.com/elastic/elasticsearch/blob/55088d154d1764a6d4fa8e9078bde9da1e9ff9a5/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java#L1977). The second call is unnecessary as we already fetched the access token in the first call, it's just simply dropped. We should refactor these two methods to avoid sending second get request just to validate the access token.
x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java
.getName()
                .equals(refreshToken.getAssociatedRealm()) == false) {
                    logger.warn(
                        "[{}] created the refresh token while authenticated by [{}] but is now authenticated by [{}]",
                        refreshToken.getAssociatedUser(),
                        refreshToken.getAssociatedRealm(),
                        clientAuthentication.getAuthenticatingSubject().getRealm().getName()
                    );
                    return Optional.of(invalidGrantException("tokens must be refreshed by the creating client"));
                } else {
                    return Optional.empty();
                }
        }
    }
    private static Map<String, Object> getRefreshTokenSourceMap(Map<String, Object> source) {
        @SuppressWarnings("unchecked")
        final Map<String, Object> refreshTokenSource = (Map<String, Object>) source.get("refresh_token");
        if (refreshTokenSource == null || refreshTokenSource.isEmpty()) {
            throw new IllegalStateException("token document is missing the refresh_token object");
        }
        return refreshTokenSource;
    }
    private static Map<String, Object> getUserTokenSourceMap(Map<String, Object> source) {
        @SuppressWarnings("unchecked")
        final Map<String, Object> accessTokenSource = (Map<String, Object>) source.get("access_token");
        if (accessTokenSource == null || accessTokenSource.isEmpty()) {
            throw new IllegalStateException("token document is missing the access_token object");
        }
        @SuppressWarnings("unchecked")
        final Map<String, Object> userTokenSource = (Map<String, Object>) accessTokenSource.get("user_token");