gws auth setup cannot deselect previously enabled APIs

[KyleQ1]

When running gws auth setup on a project I selected all apis painstakingly but my organization doesn't allow then. Then in a new run all previously enabled APIs appear pre-selected with no option to deselect them. This is a problem when:

• Your Google Workspace org restricts certain APIs
• You initially selected all APIs by mistake
• You want to reduce the scope of enabled APIs

Expected: auth setup should allow deselecting previously enabled APIs, or provide a --services flag like auth login does.

Workaround: Maybe use gws auth login not sure yet...