I still think it's just a good general practice to avoid global state when possible.  You could move the ec2_add_priv_launch_key, ec2_process_priv_launch_key, decrypt_password_data into a single class that maintains the state.