Wrote a short blog on a pattern for using end user credentials in non-interactive automations with Google APIs that do not support service accounts such as Gmail, Calendar, Drive, etc.
https://justin.poehnelt.com/posts/google-user-credentials-as-application-default/