token endponint is used for token refresh. Note that iam.serviceAccountTokenCreator role is required to use the IAM endpoint. .. note:: Typically one of the helper constructors :meth:`from_service_account_file` or :meth:`from_service_account_info` are used instead of calling the constructor directly. FTN)