Never set public-read on gcs uploads

I will remove all callsites in a follow up cl to make this easy to merge

Bug: 177799191
Change-Id: I6b4a51099a441e95e58b5708af5738fc21f8cc8f
diff --git a/tools/utils.py b/tools/utils.py
index 5719871..64c9a49 100644
--- a/tools/utils.py
+++ b/tools/utils.py
@@ -344,16 +344,12 @@
   cmd = [get_gsutil(), '-m', 'cp']
   if is_html:
     cmd += ['-z', 'html']
-  if public_read:
-    cmd += ['-a', 'public-read']
   cmd += ['-R', directory, destination]
   PrintCmd(cmd)
   subprocess.check_call(cmd)
 
 def upload_file_to_cloud_storage(source, destination, public_read=True):
   cmd = [get_gsutil(), 'cp']
-  if public_read:
-    cmd += ['-a', 'public-read']
   cmd += [source, destination]
   PrintCmd(cmd)
   subprocess.check_call(cmd)