merge YARN-320 from trunk. RM should always be able to renew its own tokens. Contributed by Daryn Sharp