gcp: init, add service account
diff --git a/tools/BUILD b/tools/BUILD
index 80678ca..4b3eb1b 100644
--- a/tools/BUILD
+++ b/tools/BUILD
@@ -57,7 +57,14 @@
 )
 
 copy_go_binary(
-	name = "nixops",
+	name = "nixops.bin",
     src = "@nixops//:bin",
     visibility = ["//visibility:public"],
 )
+
+sh_binary(
+    name = "nixops",
+    srcs = ["nixops.sh"],
+    data = [":nixops.bin", ":secretstore"],
+)
+