Follow-up from "Align X Ray permission model to Duo Pro Add On"

The following discussion from !143798 (merged) should be addressed:

• @mkaeppler started a discussion: (+2 comments)

  suggestion: This may be undermining an abstraction we just introduced via ::CloudConnector::AccessService. We should probably stub out that service object instead of the token returned. WDYT @alipniagov?