And work around GCE's annoying security issues that that exposed. Required for #14069
Follow up azure and aws splits, we need to be consistent and rename `cloud-gce` to `discovery-gce`.