Service scopes

Added service account read only scope for Google Cloud Storage to allow
instances access to startup scripts.