detect (and punish) deprecated images in gce
suggest turning off iptables in google compute