Keyless authentication for Zerotouch enrollment

Documentation recommends creating Google Cloud Service account keys and passing the key to createResellerService[1]. This appears not to be best practice from a security perspective[2]. Are there other keyless authentication options like Workload ID federation etc

ResellerService samsungResellerService = SamsungResellerServiceFactory.createResellerService(resellerId, serviceAccountKeyFilePath, clientIdentifier);

[1] https://developers.google.com/zero-touch/guides/reseller-library/common-operations#create_resellerservice_objects

[2]