https://docs.sysdig.com/en/sysdig-secure/gcp-domain-wide-delegation/