Dns-google plugin renew --dry-run failed

However, if you originally attached a service account to GCE, dry-run will succeed.