Contains information needed for generating an OpenID Connect token
<https://developers.google.com/identity/protocols/OpenIDConnect>__.
This type of authorization can be used for many scenarios, including
calling Cloud Run, or endpoints where you intend to validate the token
yourself.
.. attribute:: service_account_email
\ Service account email
<https://cloud.google.com/iam/docs/service-accounts>__ to be
used for generating OIDC token. The service account must be
within the same project as the job. The caller must have
iam.serviceAccounts.actAs permission for the service account.
