can you give these two strings (`'authorized_user'` and `'service_account'`) names that we use throughout?