use pem to authenticate gs