Analogous to this: https://cloud.google.com/run/docs/authenticating/service-to-service#use_the_authentication_libraries One client per downstream service should be defined during boot and lazily evaluated once needed