Add note about service accounts & key pem