gcp: Make AccountWarehouse assign roles (#3)
gcp: Make AccountWarehouse assign roles (#3)

The logic here allows assigning roles in other projects.  This works so
long as the identity running the service has IAM Admin rights in the
other project.

googlegenomics/ga4gh-identity