Part of ENG-6664
Depends on D13992
Manual testing with mocked invalid access token. Identity authed RPC calls end up with logout.
should this be includes('bad_credentials')?
also, maybe worth combining with D14029 and putting bad_credentials into shared constant, something like this