gce: adding docs for Service Account scopes