Authenticating to Vault using Google Cloud IAM service accounts