- type: replace
  path: /resource_pools/name=vms/cloud_properties/service_account?
  value: ((service_account))

- type: remove
  path: /instance_groups/name=bosh/properties/google/json_key?

- type: remove
  path: /cloud_provider/properties/google/json_key?

Add ability to use service account instead of service key
Add ability to use service account instead of service key

Need to do: `gcloud auth application-default login` before deploy
