Sign a string using a Service Account private key.

Provides shared methods for updating request metadata (request headers).