This likely should live inside `gcloud/credentials.py` but is too big of a task for the "ability to sign URLs" task (#56) CC: @proppy