Complete the mitm prevention on GCE.

Why do we need the private key?  I'd assume we could leave this on the server just fine.