In a data pipeline that utilizes Cloud Pub/Sub for data ingestion, where data is stored in topics and processed by a Dataflow workflow before being written to BigQuery, what is the recommended authentication method for reading data from Cloud Pub/Sub?