GKE Workload identity allows us to attach the service account to the Kubernetes pod and remove the hassle to manage the service account credentials JSON file within the pod or cluster. As we are using credentials file and keeping k8s secret. Instead of using that, can we use workload identity ?