Add note on configuring provider service accounts

Signed-off-by: Hasan Turken <turkenh@gmail.com>

content/master/concepts/providers.md

@@ -766,6 +766,20 @@ spec:
       name: my-service-account
 ```
 
+{{<hint "important" >}}
+Setting the `serviceAccountTemplate.metadata.name` field will override the
+the name of service account created by the package manager and used in the
+provider deployment. The package manager will own that service account and
+will be fighting to take ownership if there are other owners. A common mistake
+is configuring the same service account for multiple packages in this way
+which ends up frequent reconciliation loops and loads on the API server.
+
+If you just want to use an existing service account, you should instead only
+set the `deploymentTemplate.spec.template.spec.serviceAccountName` field.
+Crossplane will then use the existing service account without taking the ownership
+and still take care of binding the necessary permissions.
+{{</hint >}}
+
 ### Provider configuration
 
 The `ProviderConfig` determines settings the Provider uses communicating to the