Enforcing identity format '...@developer.gserviceaccount.com' correctly