service account

An identity for a program rather than a person. The app runs as `kettle-api-runtime` and the pipeline as `kettle-deployer`.