Moving it as a public method to appengine.AppAssertionCredentials class would increase the new surface we introduce. We don't want that.
Moving it as a private method over there wouldn't gain us much: we'd still need an import followed by a one line to call this method.
I would rather let it here.