Complete the mitm prevention on GCE.

This is the client's private key, not the server's.   I'm not actually sure that it's used in the HTTPs flow, I could try ripping it out...