auth: dropped service account auth, because can hit datastore API with APIkey credentials too