Yes, it is safe to say that the service account key (gcloud-service-account.json) can no longer be used by anyone. The “invalid_grant: Invalid JWT Signature” error basically means that the service account key has expired or deleted.

To fix this, kindly follow this documentation: How to Fix | Adding New Service Account