builder/googlecompute: only load secrets/private key if given