populate-workspace hook needs to use proper shell, otherwise passwords are printed
Adding UpdatePolicy to CFN