Changing prn (for service account assertions) to sub, per specification change.

Reviewed in https://codereview.appspot.com/7791043/
2 files changed