Before we deploy an application to Google Cloud, we typically want to test it locally. If the application uses Google Cloud APIs, then we somehow need to ensure that the application can authenticate. We could use a service account key for that, but the best practices for using and managing service accounts (guess who wrote these) advise against that approach: During your daily work, you might use tools such as the Google Cloud CLI, gsutil, or terraform. Don't use a service account to run thes...