The documentation on GCP serviceAccounts and policies is sooo bad that I just locked myself out of my entire project 😢