Best practices for Identity and Access Management on Compute Engine (Google Cloud Next '17)