Chapter 8. Using a service account as an OAuth client