istio: JWT error during manifest apply

$ go run istioctl/cmd/istioctl/main.go manifest apply
This will install the default Istio profile into the cluster. Proceed? (y/N) y
Error: failed to generate and apply manifests, error: failed to generate manifest: failed to determine JWT policy support. Use the --force flag to ignore this: unable to retrieve the complete list of server APIs: metrics.k8s.io/v1beta1: the server is currently unable to handle the request
exit status 1

This is with a 1.14 cluster. Not sure if it’s a k8s version problem because the k8s version check claims that >=1.14 is supported. Regardless, this message is fine for logging but not suitable as a high level user message.