Use default(omit) to allow deploy path without service account

[copelco]

Should we support a path that doesn't require a deploy account? One idea would be to use the default(omit) pattern here and only perform the above deploy-account tasks or call out to another tasks file if k8s_auth_host is defined. I also see the value in always using the deploy account, so just an idea.