Updated authentication section for clarity.

This change makes it very clear that if you're not running on GCE, `keyfile.json` is required, and this section explains how you find it.