Shouldn't we move those (or at least the default) into the `gce` module?

Note sure if we'll be using oauth2 for all providers, so I think it makes sense to delegate that to the `Cloud` interface.