GCE: refactor handling of credentials, make it possible to switch from supplying credentials via .nix to ENV vars and back, improve error messages.