Continuing the discussion from Multiple OAuth clients in the same Google Cloud project revoking each other's token: