Terraform: configure API grants for machine-to-machine client