service account using SignedJwtAssertionCredentials