For GCE, allow insecure registries anywhere in 10.0.0.0/8.

@timbot was saying `docker-cache.clustermaster.net` was already SSL terminated.