To access service protected by Gcloud IAP a client need to send HTTP cookies (like `GCP_IAAP_AUTH_TOKEN_*`). Git works fine with it after setting up the `http.cookieFile` configuration option, but git-lfs don't send HTTP cookies at all.