Hi Guillaume, you have touched on one of the limitations of impersonation that I believe I mentioned in the article. In that case downloading a key to maintain parity for testing would be necessary. If this is a regular requirement for Cloud Functions, this would be a great use case for HashiCorp Vault, which can lease out short lived service account keys.