auth: draft support for compute service account