machines that aren't natted will be mutually accessible within a GCE
network, right?  if so, seems valid to offer a default (aka private) and
the flag which allows access type such as nat, and currently limited to
NAT.  if we special-case out the ability to specify a network type, when
upgrades occur people need to change more code.