We need this for two reasons:

1. clang coverage.

2. Excluding lines such as NOT_IMPLEMENTED and NOT_REACHED.

We know lcov is really slow from bazelbuild/bazel#1118, but since we use a single test binary it shouldn't be too bad, maybe a couple of minutes for the test (vs. 30 mins + when running with all the tests producing individual lcov reports).