Infrastructure for OAuth2 service accounts