Using the GCP service account to grant a long-lived credential