Refactor:
The readme should briefly describe the options for connecting to EE and link to them (additional .md files, one for each method). Currently the readme only describes initializing by constructing google.oauth2.credentials.Credentials directly from environmental variable stored credentials (private key).
Methods:
The last three should be emphasized, but if a service account or Workload Identity Federation are not possible for some reason, the private key could be used as a last less secure option.
cc @12rambau