s3-mfa: add tool for setting up s3-ehr.cfg using gemalto mfa