Oh wait, I think there is something else going on. The error messages about sqladmin.googleapis.com are for a different project than the one being targeted. It is one of those things where you have to enable the API on the project the service account is created in.
Yeah, that always gets me too 