PermissionserviceAgent
cloudkms.cryptoKeyVersions.useToDecrypt✔
cloudkms.cryptoKeyVersions.useToEncrypt✔
cloudkms.cryptoKeys.get✔