Add API to AccountManager to allow simpler retrieval of ServiceAccounts for a Provider

Previously, no simple API existed to retrieve a service account which
is provided by a particular provider.  This commit adds such a function
to the AccountManager interface, and adds unit tests to ensure its
correctness.