Add support for service account-based firewall targets

[zefdelgadillo]

Firewall rules can only be configured by network tag. Better practice is to use Service Accounts, and this module should support that.