Improve error messages if service account doesn't have permission

[Temikus]

See #234 (comment)

Scenario that should let us repro:

I had two projects A and B, I specified to use project B in this plugin but I used project A’s service account credentials in the config.