shuffle around service.json, making it easier to swap out an auth approach.