You're getting bitten by the gRPC requirement to use TLS when you send credentials to a non-localhost address. There is a work-around using a custom per-call credentials, but I don't have a snippet available for python right now.