Agree, Google made it really easy here, compared to using service account certificates like with some of their other APIs.