fail on setup errors
Fixed S3_PING IAM policy template, TODOs
always install unlimited-strength crypto