### Description

Currently, the [`tryAuthenticateToken`](https://github.com/elastic/elasticsearch/blob/55088d154d1764a6d4fa8e9078bde9da1e9ff9a5/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java#L458) method calls `decodeAndValidateToken` which ends up sending two `GetRequest` for the same token ID. First in [`decodeToken`](https://github.com/elastic/elasticsearch/blob/55088d154d1764a6d4fa8e9078bde9da1e9ff9a5/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java#L602) and second in [`checkIfTokenIsValid`](https://github.com/elastic/elasticsearch/blob/55088d154d1764a6d4fa8e9078bde9da1e9ff9a5/x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java#L1977). The second call is unnecessary as we already fetched the access token in the first call, it's just simply dropped. We should refactor these two methods to avoid sending second get request just to validate the access token.
x-pack/plugin/security/src/main/java/org/elasticsearch/xpack/security/authc/TokenService.java
final Authentication associatedAuthentication;
                try {
                    associatedAuthentication = AuthenticationContextSerializer.decode((String) clientInfo.get("authentication"));
                } catch (IOException e) {
                    throw new IllegalStateException("invalid client authentication for refresh", e);
                }
                if (clientInfo.containsKey("user") || clientInfo.containsKey("realm")) {
                    throw new IllegalStateException("user and/or associated realm must not be present when associated authentication is");
                }
                return new RefreshTokenStatus(
                    invalidated,
                    associatedAuthentication,
                    refreshed,
                    refreshInstant,
                    supersedingTokens,
                    iv,
                    salt
                );
            } else {
                final String associatedUser;
                final String associatedRealm;
                
                if (false == clientInfo.containsKey("user")) {
                    throw new IllegalStateException(
                        "token document must contain the \"client.user\" field if the associated "
                            + "\"authentication\" field does not exist"
                    );
                }
                associatedUser = (String) clientInfo.get("user");