Create a topic that automatically has a admin key set, only allowing for the serverless client to update them. You can a topic completely private for writes and updates and sending messages.