Regarding the support for service account impersonation that was discussed in #346 and that I added in #347, I noticed that googleapis/google-auth-library-java/pull/613 and golang/oauth2/pull/468 go beyond accepting a token obtained externally from projects.serviceAccounts.generateAccessToken and actually perform the RPC to obtain the token when provided with the appropriate service account credentials. Should this library do the same?