@Shawn_Crocker @Harry_Doan and team are working on this. Looks like an option to supply the appropriate scopes, which will then allow us to use the appropriate token depending on the service that is being used (Cloud Functions vs Drive API etc), should be out in our next cloud release. Will confirm here when it is available.