Yes, simply add the key gcloud generates as normal using ssh-add ~/.ssh/google_compute_engine
----
Also, now that you mention it, even if I encrypted the generated SSH key, wouldn't running a `gcloud ...` command again just ... re-generate the key, in unencrypted form?
When I log in to `gcloud`, that goes through our corporate login. Corporate login uses a client certificate and two-step.