My Service Account Key Got Blocked By an Org Policy I Didn't Know Existed

The error didn't even try to be helpful: FAILED_PRECONDITION: Key creation is not allowed on this...