Use golang/oauth2, no longer require client_secrets.json, and use
Service Account when run from a GCE Instance.