hi there! I’m playing around with the pubsub kolide plugin and it seemsl ike I’m getting this error:

{
  "error": "error writing status logs: pubsub publish: rpc error: code = PermissionDenied desc = Request had insufficient authentication scopes."
}

on the endpoint, not the fleet server. Does this imply that using the pubsub plugin means that we have to give all application default credentials in the entire set of endpoints talk to the pubsub queue?