We should update the testing to use Cloud Build and a new Service Account per run, as documented here.