EC2 SSH improvements

This patch makes two changes to the EC2 scripts:
  1. Generates an ephemeral SSH key to be used within each cluster instead of copying the user's private key everywhere. This also has the side-effect of making the "--identity-file" parameter optional.
  2. Replaces most of the string manipulation to construct shell commands with argument lists for safety and composability.