Clean and regen docs (#401)

diff --git a/docs/dyn/cloudkms_v1.projects.locations.keyRings.cryptoKeys.html b/docs/dyn/cloudkms_v1.projects.locations.keyRings.cryptoKeys.html
index 931fe60..af88aba 100644
--- a/docs/dyn/cloudkms_v1.projects.locations.keyRings.cryptoKeys.html
+++ b/docs/dyn/cloudkms_v1.projects.locations.keyRings.cryptoKeys.html
@@ -84,10 +84,10 @@
 <p class="firstline">Create a new CryptoKey within a KeyRing.</p>
 <p class="toc_element">
   <code><a href="#decrypt">decrypt(name, body, x__xgafv=None)</a></code></p>
-<p class="firstline">Decrypt data that was protected by Encrypt.</p>
+<p class="firstline">Decrypts data that was protected by Encrypt.</p>
 <p class="toc_element">
   <code><a href="#encrypt">encrypt(name, body, x__xgafv=None)</a></code></p>
-<p class="firstline">Encrypt data, so that it can only be recovered by a call to Decrypt.</p>
+<p class="firstline">Encrypts data, so that it can only be recovered by a call to Decrypt.</p>
 <p class="toc_element">
   <code><a href="#get">get(name, x__xgafv=None)</a></code></p>
 <p class="firstline">Returns metadata for a given CryptoKey, as well as its</p>
@@ -148,15 +148,15 @@
       # parent CryptoKey, in which case the server will choose the appropriate
       # version for the operation.
     "state": "A String", # The current state of the CryptoKeyVersion.
-    "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
-    "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
-        # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
     "destroyTime": "A String", # Output only. The time this CryptoKeyVersion's key material is scheduled
         # for destruction. Only present if state is
         # DESTROY_SCHEDULED.
+    "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
     "destroyEventTime": "A String", # Output only. The time this CryptoKeyVersion's key material was
         # destroyed. Only present if state is
         # DESTROYED.
+    "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
+        # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
   },
   "purpose": "A String", # The immutable purpose of this CryptoKey. Currently, the only acceptable
       # purpose is ENCRYPT_DECRYPT.
@@ -205,15 +205,15 @@
         # parent CryptoKey, in which case the server will choose the appropriate
         # version for the operation.
       "state": "A String", # The current state of the CryptoKeyVersion.
-      "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
-      "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
-          # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
       "destroyTime": "A String", # Output only. The time this CryptoKeyVersion's key material is scheduled
           # for destruction. Only present if state is
           # DESTROY_SCHEDULED.
+      "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
       "destroyEventTime": "A String", # Output only. The time this CryptoKeyVersion's key material was
           # destroyed. Only present if state is
           # DESTROYED.
+      "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
+          # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
     },
     "purpose": "A String", # The immutable purpose of this CryptoKey. Currently, the only acceptable
         # purpose is ENCRYPT_DECRYPT.
@@ -232,7 +232,7 @@
 
 <div class="method">
     <code class="details" id="decrypt">decrypt(name, body, x__xgafv=None)</code>
-  <pre>Decrypt data that was protected by Encrypt.
+  <pre>Decrypts data that was protected by Encrypt.
 
 Args:
   name: string, Required. The resource name of the CryptoKey to use for decryption.
@@ -262,7 +262,7 @@
 
 <div class="method">
     <code class="details" id="encrypt">encrypt(name, body, x__xgafv=None)</code>
-  <pre>Encrypt data, so that it can only be recovered by a call to Decrypt.
+  <pre>Encrypts data, so that it can only be recovered by a call to Decrypt.
 
 Args:
   name: string, Required. The resource name of the CryptoKey or CryptoKeyVersion
@@ -332,15 +332,15 @@
         # parent CryptoKey, in which case the server will choose the appropriate
         # version for the operation.
       "state": "A String", # The current state of the CryptoKeyVersion.
-      "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
-      "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
-          # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
       "destroyTime": "A String", # Output only. The time this CryptoKeyVersion's key material is scheduled
           # for destruction. Only present if state is
           # DESTROY_SCHEDULED.
+      "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
       "destroyEventTime": "A String", # Output only. The time this CryptoKeyVersion's key material was
           # destroyed. Only present if state is
           # DESTROYED.
+      "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
+          # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
     },
     "purpose": "A String", # The immutable purpose of this CryptoKey. Currently, the only acceptable
         # purpose is ENCRYPT_DECRYPT.
@@ -409,48 +409,51 @@
       { # Specifies the audit configuration for a service.
           # The configuration determines which permission types are logged, and what
           # identities, if any, are exempted from logging.
-          # An AuditConifg must have one or more AuditLogConfigs.
+          # An AuditConfig must have one or more AuditLogConfigs.
           #
           # If there are AuditConfigs for both `allServices` and a specific service,
           # the union of the two AuditConfigs is used for that service: the log_types
           # specified in each AuditConfig are enabled, and the exempted_members in each
           # AuditConfig are exempted.
+          #
           # Example Policy with multiple AuditConfigs:
-          # {
-          #   "audit_configs": [
+          #
           #     {
-          #       "service": "allServices"
-          #       "audit_log_configs": [
+          #       "audit_configs": [
           #         {
-          #           "log_type": "DATA_READ",
-          #           "exempted_members": [
-          #             "user:foo@gmail.com"
+          #           "service": "allServices"
+          #           "audit_log_configs": [
+          #             {
+          #               "log_type": "DATA_READ",
+          #               "exempted_members": [
+          #                 "user:foo@gmail.com"
+          #               ]
+          #             },
+          #             {
+          #               "log_type": "DATA_WRITE",
+          #             },
+          #             {
+          #               "log_type": "ADMIN_READ",
+          #             }
           #           ]
           #         },
           #         {
-          #           "log_type": "DATA_WRITE",
-          #         },
-          #         {
-          #           "log_type": "ADMIN_READ",
-          #         }
-          #       ]
-          #     },
-          #     {
-          #       "service": "fooservice@googleapis.com"
-          #       "audit_log_configs": [
-          #         {
-          #           "log_type": "DATA_READ",
-          #         },
-          #         {
-          #           "log_type": "DATA_WRITE",
-          #           "exempted_members": [
-          #             "user:bar@gmail.com"
+          #           "service": "fooservice.googleapis.com"
+          #           "audit_log_configs": [
+          #             {
+          #               "log_type": "DATA_READ",
+          #             },
+          #             {
+          #               "log_type": "DATA_WRITE",
+          #               "exempted_members": [
+          #                 "user:bar@gmail.com"
+          #               ]
+          #             }
           #           ]
           #         }
           #       ]
           #     }
-          #   ]
-          # }
+          #
           # For fooservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
           # logging. It also exempts foo@gmail.com from DATA_READ logging, and
           # bar@gmail.com from DATA_WRITE logging.
@@ -536,6 +539,7 @@
             "dataAccess": { # Write a Data Access (Gin) log # Data access options.
             },
             "cloudAudit": { # Write a Cloud Audit log # Cloud audit options.
+              "logName": "A String", # The log_name to populate in the Cloud Audit Record.
             },
           },
         ],
@@ -558,7 +562,6 @@
         # If no `etag` is provided in the call to `setIamPolicy`, then the existing
         # policy is overwritten blindly.
     "bindings": [ # Associates a list of `members` to a `role`.
-        # Multiple `bindings` must not be specified for the same `role`.
         # `bindings` with no members will result in an error.
       { # Associates `members` with a `role`.
         "role": "A String", # Role that is assigned to `members`.
@@ -583,11 +586,34 @@
             # * `group:{emailid}`: An email address that represents a Google group.
             #    For example, `admins@example.com`.
             #
+            #
             # * `domain:{domain}`: A Google Apps domain name that represents all the
             #    users of that domain. For example, `google.com` or `example.com`.
             #
           "A String",
         ],
+        "condition": { # Represents an expression text. Example: # The condition that is associated with this binding.
+            # NOTE: an unsatisfied condition will not allow user access via current
+            # binding. Different bindings, including their conditions, are examined
+            # independently.
+            # This field is GOOGLE_INTERNAL.
+            #
+            #     title: "User account presence"
+            #     description: "Determines whether the request has a user account"
+            #     expression: "size(request.user) > 0"
+          "location": "A String", # An optional string indicating the location of the expression for error
+              # reporting, e.g. a file name and a position in the file.
+          "expression": "A String", # Textual representation of an expression in
+              # [Common Expression Language](http://go/api-expr) syntax.
+              #
+              # The application context of the containing message determines which
+              # well-known feature set of CEL is supported.
+          "description": "A String", # An optional description of the expression. This is a longer text which
+              # describes the expression, e.g. when hovered over it in a UI.
+          "title": "A String", # An optional title for the expression, i.e. a short string describing
+              # its purpose. This can be used e.g. in UIs which allow to enter the
+              # expression.
+        },
       },
     ],
     "iamOwned": True or False,
@@ -642,15 +668,15 @@
             # parent CryptoKey, in which case the server will choose the appropriate
             # version for the operation.
           "state": "A String", # The current state of the CryptoKeyVersion.
-          "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
-          "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
-              # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
           "destroyTime": "A String", # Output only. The time this CryptoKeyVersion's key material is scheduled
               # for destruction. Only present if state is
               # DESTROY_SCHEDULED.
+          "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
           "destroyEventTime": "A String", # Output only. The time this CryptoKeyVersion's key material was
               # destroyed. Only present if state is
               # DESTROYED.
+          "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
+              # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
         },
         "purpose": "A String", # The immutable purpose of this CryptoKey. Currently, the only acceptable
             # purpose is ENCRYPT_DECRYPT.
@@ -717,15 +743,15 @@
       # parent CryptoKey, in which case the server will choose the appropriate
       # version for the operation.
     "state": "A String", # The current state of the CryptoKeyVersion.
-    "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
-    "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
-        # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
     "destroyTime": "A String", # Output only. The time this CryptoKeyVersion's key material is scheduled
         # for destruction. Only present if state is
         # DESTROY_SCHEDULED.
+    "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
     "destroyEventTime": "A String", # Output only. The time this CryptoKeyVersion's key material was
         # destroyed. Only present if state is
         # DESTROYED.
+    "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
+        # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
   },
   "purpose": "A String", # The immutable purpose of this CryptoKey. Currently, the only acceptable
       # purpose is ENCRYPT_DECRYPT.
@@ -773,15 +799,15 @@
         # parent CryptoKey, in which case the server will choose the appropriate
         # version for the operation.
       "state": "A String", # The current state of the CryptoKeyVersion.
-      "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
-      "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
-          # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
       "destroyTime": "A String", # Output only. The time this CryptoKeyVersion's key material is scheduled
           # for destruction. Only present if state is
           # DESTROY_SCHEDULED.
+      "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
       "destroyEventTime": "A String", # Output only. The time this CryptoKeyVersion's key material was
           # destroyed. Only present if state is
           # DESTROYED.
+      "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
+          # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
     },
     "purpose": "A String", # The immutable purpose of this CryptoKey. Currently, the only acceptable
         # purpose is ENCRYPT_DECRYPT.
@@ -848,48 +874,51 @@
         { # Specifies the audit configuration for a service.
             # The configuration determines which permission types are logged, and what
             # identities, if any, are exempted from logging.
-            # An AuditConifg must have one or more AuditLogConfigs.
+            # An AuditConfig must have one or more AuditLogConfigs.
             #
             # If there are AuditConfigs for both `allServices` and a specific service,
             # the union of the two AuditConfigs is used for that service: the log_types
             # specified in each AuditConfig are enabled, and the exempted_members in each
             # AuditConfig are exempted.
+            #
             # Example Policy with multiple AuditConfigs:
-            # {
-            #   "audit_configs": [
+            #
             #     {
-            #       "service": "allServices"
-            #       "audit_log_configs": [
+            #       "audit_configs": [
             #         {
-            #           "log_type": "DATA_READ",
-            #           "exempted_members": [
-            #             "user:foo@gmail.com"
+            #           "service": "allServices"
+            #           "audit_log_configs": [
+            #             {
+            #               "log_type": "DATA_READ",
+            #               "exempted_members": [
+            #                 "user:foo@gmail.com"
+            #               ]
+            #             },
+            #             {
+            #               "log_type": "DATA_WRITE",
+            #             },
+            #             {
+            #               "log_type": "ADMIN_READ",
+            #             }
             #           ]
             #         },
             #         {
-            #           "log_type": "DATA_WRITE",
-            #         },
-            #         {
-            #           "log_type": "ADMIN_READ",
-            #         }
-            #       ]
-            #     },
-            #     {
-            #       "service": "fooservice@googleapis.com"
-            #       "audit_log_configs": [
-            #         {
-            #           "log_type": "DATA_READ",
-            #         },
-            #         {
-            #           "log_type": "DATA_WRITE",
-            #           "exempted_members": [
-            #             "user:bar@gmail.com"
+            #           "service": "fooservice.googleapis.com"
+            #           "audit_log_configs": [
+            #             {
+            #               "log_type": "DATA_READ",
+            #             },
+            #             {
+            #               "log_type": "DATA_WRITE",
+            #               "exempted_members": [
+            #                 "user:bar@gmail.com"
+            #               ]
+            #             }
             #           ]
             #         }
             #       ]
             #     }
-            #   ]
-            # }
+            #
             # For fooservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
             # logging. It also exempts foo@gmail.com from DATA_READ logging, and
             # bar@gmail.com from DATA_WRITE logging.
@@ -975,6 +1004,7 @@
               "dataAccess": { # Write a Data Access (Gin) log # Data access options.
               },
               "cloudAudit": { # Write a Cloud Audit log # Cloud audit options.
+                "logName": "A String", # The log_name to populate in the Cloud Audit Record.
               },
             },
           ],
@@ -997,7 +1027,6 @@
           # If no `etag` is provided in the call to `setIamPolicy`, then the existing
           # policy is overwritten blindly.
       "bindings": [ # Associates a list of `members` to a `role`.
-          # Multiple `bindings` must not be specified for the same `role`.
           # `bindings` with no members will result in an error.
         { # Associates `members` with a `role`.
           "role": "A String", # Role that is assigned to `members`.
@@ -1022,11 +1051,34 @@
               # * `group:{emailid}`: An email address that represents a Google group.
               #    For example, `admins@example.com`.
               #
+              #
               # * `domain:{domain}`: A Google Apps domain name that represents all the
               #    users of that domain. For example, `google.com` or `example.com`.
               #
             "A String",
           ],
+          "condition": { # Represents an expression text. Example: # The condition that is associated with this binding.
+              # NOTE: an unsatisfied condition will not allow user access via current
+              # binding. Different bindings, including their conditions, are examined
+              # independently.
+              # This field is GOOGLE_INTERNAL.
+              #
+              #     title: "User account presence"
+              #     description: "Determines whether the request has a user account"
+              #     expression: "size(request.user) > 0"
+            "location": "A String", # An optional string indicating the location of the expression for error
+                # reporting, e.g. a file name and a position in the file.
+            "expression": "A String", # Textual representation of an expression in
+                # [Common Expression Language](http://go/api-expr) syntax.
+                #
+                # The application context of the containing message determines which
+                # well-known feature set of CEL is supported.
+            "description": "A String", # An optional description of the expression. This is a longer text which
+                # describes the expression, e.g. when hovered over it in a UI.
+            "title": "A String", # An optional title for the expression, i.e. a short string describing
+                # its purpose. This can be used e.g. in UIs which allow to enter the
+                # expression.
+          },
         },
       ],
       "iamOwned": True or False,
@@ -1081,48 +1133,51 @@
       { # Specifies the audit configuration for a service.
           # The configuration determines which permission types are logged, and what
           # identities, if any, are exempted from logging.
-          # An AuditConifg must have one or more AuditLogConfigs.
+          # An AuditConfig must have one or more AuditLogConfigs.
           #
           # If there are AuditConfigs for both `allServices` and a specific service,
           # the union of the two AuditConfigs is used for that service: the log_types
           # specified in each AuditConfig are enabled, and the exempted_members in each
           # AuditConfig are exempted.
+          #
           # Example Policy with multiple AuditConfigs:
-          # {
-          #   "audit_configs": [
+          #
           #     {
-          #       "service": "allServices"
-          #       "audit_log_configs": [
+          #       "audit_configs": [
           #         {
-          #           "log_type": "DATA_READ",
-          #           "exempted_members": [
-          #             "user:foo@gmail.com"
+          #           "service": "allServices"
+          #           "audit_log_configs": [
+          #             {
+          #               "log_type": "DATA_READ",
+          #               "exempted_members": [
+          #                 "user:foo@gmail.com"
+          #               ]
+          #             },
+          #             {
+          #               "log_type": "DATA_WRITE",
+          #             },
+          #             {
+          #               "log_type": "ADMIN_READ",
+          #             }
           #           ]
           #         },
           #         {
-          #           "log_type": "DATA_WRITE",
-          #         },
-          #         {
-          #           "log_type": "ADMIN_READ",
-          #         }
-          #       ]
-          #     },
-          #     {
-          #       "service": "fooservice@googleapis.com"
-          #       "audit_log_configs": [
-          #         {
-          #           "log_type": "DATA_READ",
-          #         },
-          #         {
-          #           "log_type": "DATA_WRITE",
-          #           "exempted_members": [
-          #             "user:bar@gmail.com"
+          #           "service": "fooservice.googleapis.com"
+          #           "audit_log_configs": [
+          #             {
+          #               "log_type": "DATA_READ",
+          #             },
+          #             {
+          #               "log_type": "DATA_WRITE",
+          #               "exempted_members": [
+          #                 "user:bar@gmail.com"
+          #               ]
+          #             }
           #           ]
           #         }
           #       ]
           #     }
-          #   ]
-          # }
+          #
           # For fooservice, this policy enables DATA_READ, DATA_WRITE and ADMIN_READ
           # logging. It also exempts foo@gmail.com from DATA_READ logging, and
           # bar@gmail.com from DATA_WRITE logging.
@@ -1208,6 +1263,7 @@
             "dataAccess": { # Write a Data Access (Gin) log # Data access options.
             },
             "cloudAudit": { # Write a Cloud Audit log # Cloud audit options.
+              "logName": "A String", # The log_name to populate in the Cloud Audit Record.
             },
           },
         ],
@@ -1230,7 +1286,6 @@
         # If no `etag` is provided in the call to `setIamPolicy`, then the existing
         # policy is overwritten blindly.
     "bindings": [ # Associates a list of `members` to a `role`.
-        # Multiple `bindings` must not be specified for the same `role`.
         # `bindings` with no members will result in an error.
       { # Associates `members` with a `role`.
         "role": "A String", # Role that is assigned to `members`.
@@ -1255,11 +1310,34 @@
             # * `group:{emailid}`: An email address that represents a Google group.
             #    For example, `admins@example.com`.
             #
+            #
             # * `domain:{domain}`: A Google Apps domain name that represents all the
             #    users of that domain. For example, `google.com` or `example.com`.
             #
           "A String",
         ],
+        "condition": { # Represents an expression text. Example: # The condition that is associated with this binding.
+            # NOTE: an unsatisfied condition will not allow user access via current
+            # binding. Different bindings, including their conditions, are examined
+            # independently.
+            # This field is GOOGLE_INTERNAL.
+            #
+            #     title: "User account presence"
+            #     description: "Determines whether the request has a user account"
+            #     expression: "size(request.user) > 0"
+          "location": "A String", # An optional string indicating the location of the expression for error
+              # reporting, e.g. a file name and a position in the file.
+          "expression": "A String", # Textual representation of an expression in
+              # [Common Expression Language](http://go/api-expr) syntax.
+              #
+              # The application context of the containing message determines which
+              # well-known feature set of CEL is supported.
+          "description": "A String", # An optional description of the expression. This is a longer text which
+              # describes the expression, e.g. when hovered over it in a UI.
+          "title": "A String", # An optional title for the expression, i.e. a short string describing
+              # its purpose. This can be used e.g. in UIs which allow to enter the
+              # expression.
+        },
       },
     ],
     "iamOwned": True or False,
@@ -1351,15 +1429,15 @@
         # parent CryptoKey, in which case the server will choose the appropriate
         # version for the operation.
       "state": "A String", # The current state of the CryptoKeyVersion.
-      "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
-      "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
-          # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
       "destroyTime": "A String", # Output only. The time this CryptoKeyVersion's key material is scheduled
           # for destruction. Only present if state is
           # DESTROY_SCHEDULED.
+      "createTime": "A String", # Output only. The time at which this CryptoKeyVersion was created.
       "destroyEventTime": "A String", # Output only. The time this CryptoKeyVersion's key material was
           # destroyed. Only present if state is
           # DESTROYED.
+      "name": "A String", # Output only. The resource name for this CryptoKeyVersion in the format
+          # `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
     },
     "purpose": "A String", # The immutable purpose of this CryptoKey. Currently, the only acceptable
         # purpose is ENCRYPT_DECRYPT.