s3.enabled and gcs.enabled are set. Credentials are taken from
+ Application Default Credentials, so Kellnr picks up
+ GOOGLE_APPLICATION_CREDENTIALS, the gcloud ADC file, workload identity,
+ or the metadata server without any credential settings of its own.
+ --gcs-enabled--oauth2-enabled