You are developing an application that will handle requests from end users. You need to secure a Cloud Function called by the application to allow authorized end users to authenticate to the function via the application while restricting access to unauthorized users. You will integrate Google Sign-In as part of the solution and want to follow Google-recommended best practices. What should you do?

A. Deploy from a source code repository and grant users the roles/cloudfunctions.viewer role. B. Deploy from a source code repository and grant users the roles/cloudfunctions.invoker role C. Deploy from your local machine using gcloud and grant users the roles/cloudfunctions.admin role D. Deploy from your local machine using gcloud and grant users the roles/cloudfunctions.developer role